GStreamer has 11 CVEs on record. 3 were published in the last 90 days. The busiest recent month was March 2026 with 7. The median CVSS is 7.8 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-122 (4) and CWE-787 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 3 prev 1
Weakness classes
Products
- GStreamer 11
Worst active — by depth score
CVE-2026-111183Critical· 9.8GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability79CVE-2026-3085High· 8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability74CVE-2026-3083High· 8.8GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability74CVE-2026-3082High· 7.8GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability68CVE-2026-2923High· 7.8GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability68
GStreamer vulnerabilities
CVEs affecting GStreamer, newest first. Open any entry for full detail, references, and exploit status.
11 CVEsRSS
CVE-2026-111183Critical· 9.80dayGStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required …
CVE-2026-73434Medium· 6.1A flaw was found in GStreamer gst-plugins-good (avidemux)
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled …
CVE-2026-73433Medium· 6.6A flaw was found in GStreamer gst-plugins-good (avidemux)
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying suffici…
CVE-2026-12892Medium· 4.4A flaw was found in GStreamer's gst-plugins-bad package
A flaw was found in GStreamer's gst-plugins-bad package. When processing a specially crafted H.264 video file containing malformed MVC or SVC extension slice NAL units, a 1-byte heap out-of-bounds read can occur during parsing. This happ…
CVE-2026-3085High· 8.80dayGStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required…
CVE-2026-3083High· 8.80dayGStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exp…
CVE-2026-3082High· 7.80dayGStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required …
CVE-2026-2923High· 7.80dayGStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to ex…
CVE-2026-2922High· 7.80dayGStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability
GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required t…
CVE-2026-2921High· 7.80dayGStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploi…
CVE-2026-2920High· 7.80dayGStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required …