VYPR

GStreamer ASF Demuxer

by Gstreamer

CVEs (2)

  • CVE-2026-19389HigAug 10, 2026
    risk 0.46cvss 7.1epss 0.00

    Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds…

  • CVE-2026-2920HigMar 16, 2026
    risk 0.44cvss 7.8epss 0.01

    GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack…