GStreamer project vulnerabilities
We track 3 vulnerabilities in GStreamer project products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.
Latest GStreamer project vulnerabilities
- 7.8 High severity
gst-editing-services: Improper Control of Dynamically-Managed Code Resources
A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can embed an arbitrary GStreamer pipeline description as an effect definition. When such a file is loaded, either explicitly by an editing application or automatically by
- 7.5 High severity
gst-rtsp-server: Buffer Copy without Checking Size of Input
Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.
- 8.8 High severity
GStreamer: Out-of-bounds Write
GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this