Skip to content
OpenAdvisories
Medium RHSA-2025:7243 4 CVEs

Red Hat Security Advisory: gstreamer1-plugins-base security update

Published May 13, 2025 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 6

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base 0:1.22.12-4.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base-debuginfo 0:1.22.12-4.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base-debugsource 0:1.22.12-4.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base-devel 0:1.22.12-4.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base-tools 0:1.22.12-4.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream gstreamer1-plugins-base-tools-debuginfo 0:1.22.12-4.el9

Vulnerabilities 4

  • Medium 6.9
    CVE-2024-47541

    GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser

    GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is responsible for parsing and removing SS…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 6.8
    CVE-2024-47542

    GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr.frame_data, the poi…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 6.8
    CVE-2024-47835

    GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser

    GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the stri…

    GStreamer GStreamer gstreamer1 gst-plugins-base1.0 Debian Ubuntu Azure Linux Alpine
  • Medium 5.1
    CVE-2024-47600

    GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask

    GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed…

    GStreamer GStreamer gst-plugins-base1.0 gstreamer1 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index
  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2331717
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2331724
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2331738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2331742
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7243.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-47541
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47541
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47541
  • article
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8036.patch
  • article
    https://gstreamer.freedesktop.org/security/sa-2024-0023.html
  • article
    https://securitylab.github.com/advisories/GHSL-2024-228_GStreamer/
  • report
    https://access.redhat.com/security/cve/CVE-2024-47542
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47542
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47542
  • article
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8033.patch
  • article
    https://gstreamer.freedesktop.org/security/sa-2024-0008.html
  • article
    https://securitylab.github.com/advisories/GHSL-2024-235_Gstreamer/
  • report
    https://access.redhat.com/security/cve/CVE-2024-47600
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47600
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47600
  • article
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch
  • article
    https://gstreamer.freedesktop.org/security/sa-2024-0018.html
  • article
    https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/
  • report
    https://access.redhat.com/security/cve/CVE-2024-47835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-47835
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-47835
  • article
    https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8039.patch
  • article
    https://gstreamer.freedesktop.org/security/sa-2024-0029.html
  • article
    https://securitylab.github.com/advisories/GHSL-2024-263_Gstreamer/