gstreamer1-plugins-good (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package gstreamer1-plugins-good, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (13)

• CVE-2024-47606 — CVSS 9.8 (critical): GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function…
• CVE-2024-47613 — CVSS 9.8 (critical): GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified…
• CVE-2024-47537 — CVSS 9.8 (critical): GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by…
• CVE-2024-47539 — CVSS 9.8 (critical): GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the…
• CVE-2024-47540 — CVSS 9.8 (critical): GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been…
• CVE-2026-3085 — CVSS 8.8 (high): GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
• CVE-2023-37327 — CVSS 8.8 (high): GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-3083 — CVSS 8.8 (high): GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-2921 — CVSS 7.8 (high): GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-2923 — CVSS 7.8 (high): GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-3082 — CVSS 7.8 (high): GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2021-3497 — CVSS 7.8 (high): GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
• CVE-2026-2920 — CVSS 7.8 (high): GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…