Skip to content
OpenAdvisories
High USN-6526-1 6 CVEs

gst-plugins-bad1.0 vulnerabilities

Published Nov 29, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GStreamer Bad Plugins incorrectly handled certain
media files. A remote attacker could use this issue to cause GStreamer
Bad Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gst-plugins-bad1.0 1.16.3-0ubuntu1.1
Ubuntu · 22.04 LTS 22.04:LTS gst-plugins-bad1.0 1.20.3-0ubuntu1.1

Vulnerabilities 6

  • High 8.8
    CVE-2023-37329

    GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this v…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2023-40474

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabili…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-40475

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability

    GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabili…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-40476

    GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vuln…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-44429

    GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this …

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine
  • High 8.8
    CVE-2023-44446

    GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability

    GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability…

    GStreamer GStreamer gst-plugins-bad1.0 gst-plugins-bad1.0 Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-37329
  • report
    https://ubuntu.com/security/CVE-2023-40474
  • report
    https://ubuntu.com/security/CVE-2023-40475
  • report
    https://ubuntu.com/security/CVE-2023-40476
  • report
    https://ubuntu.com/security/CVE-2023-44429
  • report
    https://ubuntu.com/security/CVE-2023-44446