Skip to content
OpenAdvisories
High USN-6268-1 2 CVEs

gst-plugins-base1.0 vulnerabilities

Published Aug 2, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GStreamer Base Plugins incorrectly handled certain
FLAC image tags. A remote attacker could use this issue to cause GStreamer
Base Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2023-37327)

It was discovered that GStreamer Base Plugins incorrectly handled certain
subtitles. A remote attacker could use this issue to cause GStreamer Base
Plugins to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2023-37328)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gst-plugins-base1.0 1.16.3-0ubuntu1.2
Ubuntu · 22.04 LTS 22.04:LTS gst-plugins-base1.0 1.20.1-1ubuntu0.1

Vulnerabilities 2

  • High 8.8
    CVE-2023-37328

    GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this v…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Alpine
  • High 7.6
    CVE-2023-37327

    GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

    GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabil…

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-37327
  • report
    https://ubuntu.com/security/CVE-2023-37328