Security Center
Security Contacts
Security notifications or problems should be reported in GitLab by filing an issue and marking it as confidential before submitting it (if you follow the link on the left the confidential checkbox should already be ticked).
If you have patches, please attach them to the confidential issue and not via a merge requests, as merge requests are always public immediately.
Always include proof-of-concepts, specially crafted files or bitstreams, or testcases with your reports as a proof that your findings are valid.
The GStreamer project encourages responsible disclosure of security issues.
Distributors please note that this is not an exhaustive or comprehensive list of security-relevant issues affecting past releases, but merely a list of security issues filed as such by third parties. Fixes that may be security relevant are also landed as part of routine bug-fixing and development activity, and as such we encourage distributors to upgrade to our latest bug-fix releases whenever possible.
Security Advisories
| ID | Summary | Date | |
|---|---|---|---|
| GStreamer-SA-2026-0092 | Out-of-bounds read in SVG image decoder | 2026-10-08 | Details |
| GStreamer-SA-2026-0091 | Out-of-bounds read in RTCP SDES privately defined entry handling | 2026-10-08 | Details |
| GStreamer-SA-2026-0090 CVE-2026-116612 | Arbitrary element instantiation in GStreamer Editing Services project file loader | 2026-10-08 | Details |
| GStreamer-SA-2026-0089 | Integer overflow and out-of-bounds read in Matroska demuxer Xiph codec data parser | 2026-10-08 | Details |
| GStreamer-SA-2026-0088 ZDI-CAN-31143 | Heap out-of-bounds write in RTP L8/L16/L24 audio depayloaders | 2026-10-08 | Details |
| GStreamer-SA-2026-0087 CVE-2026-112214 | Excessive memory allocation in the ASF demuxer | 2026-10-08 | Details |
| GStreamer-SA-2026-0086 | Out-of-bounds read in H.265 RTP depayloader when processing short packets | 2026-10-08 | Details |
| GStreamer-SA-2026-0085 | Stack-based out-of-bounds write in closed caption converter and combiner | 2026-10-08 | Details |
| GStreamer-SA-2026-0084 | Out-of-bounds read in the RTSP KeyMgmt header parser | 2026-10-08 | Details |
| GStreamer-SA-2026-0083 CVE-2026-86476 | Out-of-bounds read and write in GStreamer video meta deserialization | 2026-10-08 | Details |
| GStreamer-SA-2026-0078 | Type confusion crash in GValue list comparison when parsing caps | 2026-10-08 | Details |
| GStreamer-SA-2026-0082 CVE-2026-85150 | NULL pointer dereference when parsing RTSP Authorization header | 2026-09-07 | Details |
| GStreamer-SA-2026-0081 | Out-of-bounds read and write in FFmpeg audio encoder and decoder with excessive channel counts | 2026-09-07 | Details |
| GStreamer-SA-2026-0080 | Credential leakage on cross-origin redirects in souphttpsrc HTTP source | 2026-09-07 | Details |
| GStreamer-SA-2026-0079 CVE-2026-88914 | Integer overflow and out-of-bounds read in MOV/MP4 demuxer closed caption parser | 2026-09-07 | Details |
| GStreamer-SA-2026-0074 | Unbounded source table growth in RTP session management leading to resource exhaustion | 2026-09-07 | Details |
| GStreamer-SA-2026-0077 CVE-2026-19387 | Heap out-of-bounds write in IMA ADPCM audio decoder | 2026-08-05 | Details |
| GStreamer-SA-2026-0076 CVE-2026-18649 | Unbounded memory growth in H.264/H.265 RTP depayloaders during fragmented NAL unit reassembly | 2026-08-05 | Details |
| GStreamer-SA-2026-0075 CVE-2026-19389 | Integer overflow and underflow in ASF demuxer bounds checks | 2026-08-05 | Details |
| GStreamer-SA-2026-0073 | Out-of-bounds read in Matroska demuxer FLAC header parser | 2026-08-05 | Details |
| GStreamer-SA-2026-0072 CVE-2026-73433, CVE-2026-73434 | Multiple out-of-bounds reads, out-of-bounds writes, and integer overflow vulnerabilities in the AVI demuxer | 2026-08-05 | Details |
| GStreamer-SA-2026-0071 | Heap buffer overflow in DVD subpicture decoder | 2026-08-05 | Details |
| GStreamer-SA-2026-0070 | Out-of bounds write in H.265/HEVC parser short-term RPS parsing | 2026-08-05 | Details |
| GStreamer-SA-2026-0069 | Heap buffer overflow in FFmpeg demuxer wrapper | 2026-08-05 | Details |
| GStreamer-SA-2026-0068 | Heap buffer overflow in QCELP RTP depayloader | 2026-08-05 | Details |
| GStreamer-SA-2026-0067 | Heap buffer overflow and memory leak in JPEG 2000 decoder | 2026-08-05 | Details |
| GStreamer-SA-2026-0066 | Integer overflow and out-of-bounds accesses in ASF-over-RTP depayloader | 2026-08-05 | Details |
| GStreamer-SA-2026-0065 | Integer overflow in Matroska LZO1X decompressor | 2026-07-08 | Details |
| GStreamer-SA-2026-0064 | NULL pointer dereference in WAV parser during adtl chunk parsing in streaming mode | 2026-07-08 | Details |
| GStreamer-SA-2026-0063 CVE-2026-59691 | Heap out-of-bounds write in RFB source when decoding framebuffer updates | 2026-07-08 | Details |
| GStreamer-SA-2026-0062 CVE-2026-59692 | Stack buffer overflow in DTLS certificate verification | 2026-07-08 | Details |
| GStreamer-SA-2026-0061 CVE-2026-14935 | Possible authentication bypass in WebRTC SDP fingerprint validation | 2026-07-08 | Details |
| GStreamer-SA-2026-0060 | Stack-based out-of-bounds write in closed caption converter | 2026-07-08 | Details |
| GStreamer-SA-2026-0059 | Out-of-bounds read in VP9 parser superframe index parsing | 2026-07-08 | Details |
| GStreamer-SA-2026-0058 CVE-2026-2920 follow-up | Out-of-bounds read in ASF demuxer packet payload parsing | 2026-07-08 | Details |
| GStreamer-SA-2026-0057 | Out-of-bounds read in RTP JPEG depayloader | 2026-07-08 | Details |
| GStreamer-SA-2026-0056 | Heap-based buffer overflow in H.266 video parser slice header processing | 2026-07-08 | Details |
| GStreamer-SA-2026-0055 | Out-of-bounds read in H.266/VVC parser PPS tile slice loop | 2026-07-08 | Details |
| GStreamer-SA-2026-0054 | Heap buffer overflow in encoding-target loader on malformed UTF-8 input | 2026-07-08 | Details |
| GStreamer-SA-2026-0053 ZDI-CAN-29584 CVE-2026-18297 | Stack and heap buffer overflow in Opus audio decoder | 2026-07-08 | Details |
| GStreamer-SA-2026-0052 ZDI-CAN-29581 CVE-2026-18298 | Heap buffer overflow in GdkPixbuf image decoder due to dimension changes | 2026-07-08 | Details |
| GStreamer-SA-2026-0051 ZDI-CAN-29787 CVE-2026-18299 | Out-of-bounds read in RTP SBC depayloader | 2026-07-08 | Details |
| GStreamer-SA-2026-0050 ZDI-CAN-29510, ZDI-CAN-29608 CVE-2026-18295, CVE-2026-18296 | Heap buffer overflow in MOV/MP4 moov recovery tool | 2026-07-08 | Details |
| GStreamer-SA-2026-0049 | Heap buffer overflow in MPEG-4 Video parser | 2026-07-08 | Details |
| GStreamer-SA-2026-0044 | Out-of-bounds read in RTP CELT audio depayloader | 2026-07-08 | Details |
| GStreamer-SA-2026-0048 CVE-2026-12891 | Out-of-bounds read in H.266 parser VUI aspect ratio parsing | 2026-06-24 | Details |
| GStreamer-SA-2026-0047 CVE-2026-12892 | One-byte out-of-bounds read in H.264 NAL unit parser | 2026-06-24 | Details |
| GStreamer-SA-2026-0046 CVE-2026-52722 | Integer overflow in VMNC decoder cursor payload size calculation | 2026-06-16 | Details |
| GStreamer-SA-2026-0045 CVE-2026-52721 | Out-of-bounds reads in PCAP parser due to missing bounds checks | 2026-06-16 | Details |
| GStreamer-SA-2026-0043 CVE-2026-52720 | Out-of-bounds read and write in RFB source | 2026-06-16 | Details |
| GStreamer-SA-2026-0042 CVE-2026-53703, CVE-2026-53704 | Out-of-bounds reads and integer overflows in RealMedia demuxer | 2026-06-12 | Details |
| GStreamer-SA-2026-0041 CVE-2026-53702 | Out-of-bounds read in H.265 parser buffering period SEI message parsing | 2026-06-12 | Details |
| GStreamer-SA-2026-0040 CVE-2026-52719 | Out-of-bounds read in VA JPEG decoder segment parsing | 2026-06-12 | Details |
| GStreamer-SA-2026-0039 CVE-2026-52718 | Assertion in AV1 parser tile data parsing | 2026-06-12 | Details |
| GStreamer-SA-2026-0038 CVE-2026-12893 | Memory leak and NULL pointer dereference in gst-libav demuxer | 2026-06-12 | Details |
| GStreamer-SA-2026-0037 CVE-2026-52717 | Heap corruption in gst-libav AV protocol pipe | 2026-06-12 | Details |
| GStreamer-SA-2026-0036 | Out-of-bounds read in SBC audio parser header parsing | 2026-06-12 | Details |
| GStreamer-SA-2026-0035 CVE-2026-53705 | Integer overflow in WavPack decoder | 2026-06-12 | Details |
| GStreamer-SA-2026-0034 | Division by zero in mDVDsub subtitle parser | 2026-06-12 | Details |
| GStreamer-SA-2026-0033 | Out-of-bounds read and modification of const data in ID3v2 parser | 2026-06-12 | Details |
| GStreamer-SA-2026-0032 | Out-of-bounds read and write in XMP tag parser | 2026-06-12 | Details |
| GStreamer-SA-2026-0031 CVE-2026-XXXX | Integer overflow and truncation in MXF demuxer | 2026-06-12 | Details |
| GStreamer-SA-2026-0030 | Missing bounds checks in RTCP SDES packet parsing | 2026-06-12 | Details |
| GStreamer-SA-2026-0029 | Bounds check errors in MXF VANC packet handling | 2026-05-11 | Details |
| GStreamer-SA-2026-0028 | Use-after-free in GStreamer core buffer value deserialization | 2026-05-11 | Details |
| GStreamer-SA-2026-0027 CVE-2026-XXXX (pending) | Out-of-bounds read in MXF demuxer temporal offset check | 2026-05-11 | Details |
| GStreamer-SA-2026-0026 CVE-2026-53701 | Out-of-bounds write in H.266/VVC parser when parsing PPS tile slices | 2026-05-11 | Details |
| GStreamer-SA-2026-0025 | Insufficient validation in MOV/MP4 demuxer uncompressed video handling | 2026-05-11 | Details |
| GStreamer-SA-2026-0024 | Out-of-bounds reads in MPEG PS PES header parsing | 2026-05-11 | Details |
| GStreamer-SA-2026-0023 | Denial of service in SRT/WebVTT parser | 2026-04-07 | Details |
| GStreamer-SA-2026-0022 CVE-2026-39043 | Heap buffer overflow in Matroska demuxer | 2026-04-07 | Details |
| GStreamer-SA-2026-0021 CVE-2026-39044 | Integer overflow in WAV parser cue handling | 2026-04-07 | Details |
| GStreamer-SA-2026-0020 CVE-2026-119843 | Assertion failures in FLV demuxer on corrupted streams | 2026-04-07 | Details |
| GStreamer-SA-2026-0019 CVE-2026-119842 | NULL-pointer dereferences in mDVDsub subtitle parser | 2026-04-07 | Details |
| GStreamer-SA-2026-0018 CVE-2026-46469, CVE-2026-46470, CVE-2026-46472 | MOV/MP4 demuxer audio channel parsing vulnerabilities | 2026-04-07 | Details |
| GStreamer-SA-2026-0017 CVE-2026-119777 | Integer overflow in H.266/VVC parser leading to stack overflow | 2026-04-07 | Details |
| GStreamer-SA-2026-0016 CVE-2026-5056 ZDI-CAN-29392 | Integer overflows and out-of-bounds access in MOV/MP4 demuxer | 2026-04-07 | Details |
| GStreamer-SA-2026-0015 CVE-2026-XXXX (pending) | Integer overflows in JPEG 2000 decimator | 2026-04-07 | Details |
| GStreamer-SA-2026-0014 CVE-2026-119729 | Integer overflow in AV1 LEB128 parser | 2026-04-07 | Details |
| GStreamer-SA-2026-0013 CVE-2026-119728 | H.264 video parser NULL pointer dereference when freeing SPS/MVC data | 2026-04-07 | Details |
| GStreamer-SA-2026-0012 CVE-2026-119727 | H.265 video parser potential denial-of-service | 2026-02-25 | Details |
| GStreamer-SA-2026-0011 CVE-2026-3084 ZDI-CAN-28910 | Out-of-bounds write in H.266 video parser when parsing picture partitions | 2026-02-25 | Details |
| GStreamer-SA-2026-0010 CVE-2026-3081 ZDI-CAN-28839 | Stack buffer overflow in H.266 video parser when parsing pic_timing SEIs | 2026-02-25 | Details |
| GStreamer-SA-2026-0009 CVE-2026-3086 ZDI-CAN-28911 | Out-of-bounds buffer write in H.266 video parser when parsing Adaptation Parameter Set | 2026-02-25 | Details |
| GStreamer-SA-2026-0008 CVE-2026-3083 CVE-2026-3085 ZDI-CAN-28851 ZDI-CAN-28850 | Multiple vulnerabilities in RTP QDM2 depayloader element | 2026-02-25 | Details |
| GStreamer-SA-2026-0007 CVE-2026-2923 ZDI-CAN-28838 | Out-of-bounds read and write in DVB Subtitle Decoder | 2026-02-25 | Details |
| GStreamer-SA-2026-0006 CVE-2026-2920 ZDI-CAN-28843 | Out-of-bounds write in ASF Demuxer | 2026-02-25 | Details |
| GStreamer-SA-2026-0005 CVE-2026-2922 ZDI-CAN-28845 | Out-of-bounds write in RealMedia Demuxer | 2026-02-25 | Details |
| GStreamer-SA-2026-0004 CVE-2026-2921 ZDI-CAN-28854 | Integer overflow in RIFF parser | 2026-02-25 | Details |
| GStreamer-SA-2026-0003 CVE-2026-3082 ZDI-CAN-28840 | Heap-based Buffer Overflow on Huffman tables reading in JPEG parser | 2026-02-25 | Details |
| GStreamer-SA-2026-0002 CVE-2026-46471 | Out-of-bounds read in MP4 demuxer | 2026-02-25 | Details |
| GStreamer-SA-2026-0001 CVE-2026-1940 | Out-of-bounds read in WAV parser | 2026-02-25 | Details |
| GStreamer-SA-2025-0009 CVE-2025-67326 CVE-2025-67327 | Multiple out-of-bounds reads in MIDI parser | 2025-12-27 | Details |
| GStreamer-SA-2025-0008 CVE-2025-67328 CVE-2025-67329 | Multiple out-of-bounds reads in MIDI parser | 2025-12-27 | Details |
| GStreamer-SA-2025-0007 CVE-2025-6663 ZDI-CAN-27381 | Stack buffer overflow in H.266 video parser | 2025-06-26 | Details |
| GStreamer-SA-2025-0006 CVE-2025-47806 | Stack buffer overflow in SubRip subtitle parser | 2025-05-29 | Details |
| GStreamer-SA-2025-0005 CVE-2025-47183 | Out-of-bounds read in MOV/MP4 demuxer II | 2025-05-29 | Details |
| GStreamer-SA-2025-0004 CVE-2025-47219 | Out-of-bounds read in MOV/MP4 demuxer I | 2025-05-29 | Details |
| GStreamer-SA-2025-0003 CVE-2025-47808 | NULL-pointer dereference in TMPlayer subtitle parser | 2025-05-29 | Details |
| GStreamer-SA-2025-0002 CVE-2025-47807 | NULL-pointer dereference in SubRip subtitle parser | 2025-05-29 | Details |
| GStreamer-SA-2025-0001 ZDI-CAN-26596 CVE-2025-3887 | Stack buffer-overflow in H.265 codec parser during slice header parsing | 2025-04-24 | Details |
| GStreamer-SA-2024-0030 GHSL-2024-280 CVE-2024-47834 | Use-after-free in Matroska demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0029 GHSL-2024-263 CVE-2024-47835 | NULL-pointer dereference in LRC subtitle parser | 2024-12-03 | Details |
| GStreamer-SA-2024-0028 GHSL-2024-262 CVE-2024-47774 | Integer overflow in AVI subtitle parser that leads to out-of-bounds reads | 2024-12-03 | Details |
| GStreamer-SA-2024-0027 GHSL-2024-261, GHSL-2024-260, GHSL-2024-259, GHSL-2024-258 CVE-2024-47778, CVE-2024-47777, CVE-2024-47776, CVE-2024-47775 | Various out-of-bounds reads in WAV parser | 2024-12-03 | Details |
| GStreamer-SA-2024-0026 GHSL-2024-117 CVE-2024-47615 | Out-of-bounds write in Ogg demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0025 GHSL-2024-118 CVE-2024-47613 | NULL-pointer dereference in gdk-pixbuf decoder | 2024-12-03 | Details |
| GStreamer-SA-2024-0024 GHSL-2024-116 CVE-2024-47607 | Stack buffer-overflow in Opus decoder | 2024-12-03 | Details |
| GStreamer-SA-2024-0023 GHSL-2024-228 CVE-2024-47541 | Out-of-bounds write in SSA subtitle parser | 2024-12-03 | Details |
| GStreamer-SA-2024-0022 GHSL-2024-115 CVE-2024-47538 | Stack buffer-overflow in Vorbis decoder | 2024-12-03 | Details |
| GStreamer-SA-2024-0021 GHSL-2024-251 CVE-2024-47603 | NULL-pointer dereference in Matroska/WebM demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0020 GHSL-2024-249 CVE-2024-47601 | NULL-pointer dereference in Matroska/WebM demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0019 GHSL-2024-250 CVE-2024-47602 | NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0018 GHSL-2024-248 CVE-2024-47600 | Out-of-bounds read in gst-discoverer-1.0 commandline tool | 2024-12-03 | Details |
| GStreamer-SA-2024-0017 GHSL-2024-197 CVE-2024-47540 | Usage of uninitialized stack memory in Matroska/WebM demuxer | 2024-12-03 | Details |
| GStreamer-SA-2024-0016 GHSL-2024-247 CVE-2024-47599 | Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences | 2024-12-03 | Details |
| GStreamer-SA-2024-0015 GHSL-2024-244 CVE-2024-47596 | Integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads | 2024-12-03 | Details |
| GStreamer-SA-2024-0014 GHSL-2024-166 CVE-2024-47606 | Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes | 2024-12-03 | Details |
| GStreamer-SA-2024-0013 GHSL-2024-243 CVE-2024-47546 | Integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads | 2024-12-03 | Details |
| GStreamer-SA-2024-0012 GHSL-2024-245 CVE-2024-47597 | Out-of-bounds reads in MP4/MOV demuxer sample table parser | 2024-12-03 | Details |
| GStreamer-SA-2024-0011 GHSL-2024-238, GHSL-2024-239, GHSL-2024-240 CVE-2024-47544 | NULL-pointer dereferences in MP4/MOV demuxer CENC handling | 2024-12-03 | Details |
| GStreamer-SA-2024-0010 GHSL-2024-242 CVE-2024-47545 | Integer overflow in MP4/MOV demuxer that can result in out-of-bounds read | 2024-12-03 | Details |
| GStreamer-SA-2024-0009 GHSL-2024-236 CVE-2024-47543 | MP4/MOV demuxer out-of-bounds read | 2024-12-03 | Details |
| GStreamer-SA-2024-0008 GHSL-2024-235 CVE-2024-47542 | ID3v2 parser out-of-bounds read and NULL-pointer dereference | 2024-12-03 | Details |
| GStreamer-SA-2024-0007 GHSL-2024-195 CVE-2024-47539 | MP4/MOV Closed Caption handling out-of-bounds write | 2024-12-03 | Details |
| GStreamer-SA-2024-0006 GHSL-2024-246 CVE-2024-47598 | MP4/MOV sample table parser out-of-bounds read | 2024-12-03 | Details |
| GStreamer-SA-2024-0005 GHSL-2024-094, GHSL-2024-237, GHSL-2024-241 CVE-2024-47537 | Integer overflow in MP4/MOV sample table parser leading to out-of-bounds writes | 2024-12-03 | Details |
| GStreamer-SA-2024-0004 CVE-2024-44331 | RTSP server: Potential Denial-of-Service (DoS) with specially crafted client requests | 2024-10-29 | Details |
| GStreamer-SA-2024-0003 JVN#02030803 / JPCERT#92912620 CVE-2024-40897 | Orc compiler stack-based buffer overflow | 2024-07-19 | Details |
| GStreamer-SA-2024-0002 ZDI-CAN-23896 CVE-2024-4453 | Integer overflow in EXIF metadata parser leading to potential heap overwrite | 2024-04-29 | Details |
| GStreamer-SA-2024-0001 ZDI-CAN-22873 CVE-2024-0444 | AV1 codec parser potential buffer overflow during tile list parsing | 2024-01-24 | Details |
| GStreamer-SA-2023-0011 ZDI-CAN-22300 CVE-2023-50186 | AV1 codec parser buffer overflow | 2023-12-18 | Details |
| GStreamer-SA-2023-0010 ZDI-CAN-22299 CVE-2023-44446 | MXF demuxer use-after-free | 2023-11-13 | Details |
| GStreamer-SA-2023-0009 ZDI-CAN-22226 CVE-2023-44429 | AV1 codec parser buffer overflow | 2023-11-13 | Details |
| GStreamer-SA-2023-0008 ZDI-CAN-21768 CVE-2023-40476 | Integer overflow in H.265 video parser leading to stack overwrite | 2023-09-20 | Details |
| GStreamer-SA-2023-0007 ZDI-CAN-21661 CVE-2023-40475 | Integer overflow leading to heap overwrite in MXF file handling with AES3 audio | 2023-09-20 | Details |
| GStreamer-SA-2023-0006 ZDI-CAN-21660 CVE-2023-40474 | Integer overflow leading to heap overwrite in MXF file handling with uncompressed video | 2023-09-20 | Details |
| GStreamer-SA-2023-0005 ZDI-CAN-21444 CVE-2023-38104 | Integer overflow leading to heap overwrite in RealMedia file handling | 2023-07-20 | Details |
| GStreamer-SA-2023-0004 ZDI-CAN-21443 CVE-2023-38103 | Integer overflow leading to heap overwrite in RealMedia file handling | 2023-07-20 | Details |
| GStreamer-SA-2023-0003 ZDI-CAN-20994 CVE-2023-37328 | Heap overwrite in PGS subtitle overlay decoder | 2023-06-20 | Details |
| GStreamer-SA-2023-0002 ZDI-CAN-20968 CVE-2023-37329 | Heap overwrite in subtitle parsing | 2023-06-20 | Details |
| GStreamer-SA-2023-0001 ZDI-CAN-20775 CVE-2023-37327 | Integer overflow leading to heap overwrite in FLAC image tag handling | 2023-06-20 | Details |
| GStreamer-SA-2022-0004 CVE-2022-1920 | Potential heap overwrite in gst_matroska_demux_add_wvpk_header | 2022-06-15 | Details |
| GStreamer-SA-2022-0003 CVE-2022-2122 | Potential heap overwrite in mp4 demuxing using zlib decompression | 2022-06-15 | Details |
| GStreamer-SA-2022-0002 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 | Potential heap overwrite in mkv demuxing using zlib/bz2/lzo decompression | 2022-06-15 | Details |
| GStreamer-SA-2022-0001 CVE-2022-1921 | Heap overwrite in avi demuxing | 2022-06-15 | Details |
| GStreamer-SA-2021-0005 | Stack overflow in gst_ffmpeg_channel_layout_to_gst() | 2021-03-15 | Details |
| GStreamer-SA-2021-0004 | Out-of-bounds read in realmedia demuxing | 2021-03-15 | Details |
| GStreamer-SA-2021-0003 CVE-2021-3498 | Heap corruption in matroska demuxing | 2021-03-15 | Details |
| GStreamer-SA-2021-0002 CVE-2021-3497 | Use-after-free in matroska demuxing | 2021-03-15 | Details |
| GStreamer-SA-2021-0001 CVE-2021-3522 | Out-of-bounds read in ID3v2 tag parsing | 2021-03-15 | Details |
| GStreamer-SA-2019-0001 CVE-2019-9928 | Buffer overflow in RTSP parsing | 2019-04-22 | Details |
| GStreamer-SA-2016-0002 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 | Multiple Issues in FLC/FLI/FLX Decoder | 2016-11-23 | Details |
| GStreamer-SA-2016-0001 CVE-2016-9445 CVE-2016-9446 | Multiple Issues in VMNC decoder | 2016-11-17 | Details |