Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/1050596?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "type": "deb", "namespace": "debian", "name": "gst-plugins-base1.0", "version": "1.22.0-3+deb12u5", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36391?format=api", "vulnerability_id": "VCID-4xqt-vrk6-dyfr", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47615.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47615.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47615", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24434", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24535", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24571", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.2435", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24418", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24463", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24478", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24377", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24392", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24383", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24353", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24229", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24215", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00084", "scoring_system": "epss", "scoring_elements": "0.24176", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.295", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.29579", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.2948", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.29543", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.29554", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00114", "scoring_system": "epss", "scoring_elements": "0.29479", "published_at": "2026-05-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47615" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47615", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47615" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331740", "reference_id": "2331740", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331740" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8038.patch", "reference_id": "8038.patch", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:18:36Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8038.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/", "reference_id": "GHSL-2024-115_GHSL-2024-118_Gstreamer", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:18:36Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11117", "reference_id": "RHSA-2024:11117", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11117" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11118", "reference_id": "RHSA-2024:11118", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11118" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11120", "reference_id": "RHSA-2024:11120", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11120" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11123", "reference_id": "RHSA-2024:11123", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11123" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11130", "reference_id": "RHSA-2024:11130", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11130" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11141", "reference_id": "RHSA-2024:11141", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11141" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11142", "reference_id": "RHSA-2024:11142", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11142" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11143", "reference_id": "RHSA-2024:11143", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11143" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11344", "reference_id": "RHSA-2024:11344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11345", "reference_id": "RHSA-2024:11345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11345" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0026.html", "reference_id": "sa-2024-0026.html", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:18:36Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0026.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47615" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4xqt-vrk6-dyfr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36371?format=api", "vulnerability_id": "VCID-64mw-yyjq-mqgp", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47542.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47542.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47542", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00078", "scoring_system": "epss", "scoring_elements": "0.23224", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00078", "scoring_system": "epss", "scoring_elements": "0.23268", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32835", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32796", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32844", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32873", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32874", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.3281", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32852", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32829", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32793", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32643", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32528", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00133", "scoring_system": "epss", "scoring_elements": "0.32445", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43414", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43382", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43446", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43458", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.43476", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00212", "scoring_system": "epss", "scoring_elements": "0.4351", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47542" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47542", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47542" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331717", "reference_id": "2331717", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331717" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8033.patch", "reference_id": "8033.patch", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:30:59Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8033.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-235_Gstreamer/", "reference_id": "GHSL-2024-235_Gstreamer", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:30:59Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-235_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7243", "reference_id": "RHSA-2025:7243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7243" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0008.html", "reference_id": "sa-2024-0008.html", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:30:59Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0008.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47542" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-64mw-yyjq-mqgp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36389?format=api", "vulnerability_id": "VCID-9wre-pzu1-y3a7", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47607.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47607.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47607", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28244", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28341", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28384", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28175", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.2824", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28282", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28288", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28186", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28199", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28182", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28137", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28053", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.27941", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.27864", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33582", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33658", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33535", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33604", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33648", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33559", "published_at": "2026-05-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47607" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47607", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47607" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331754", "reference_id": "2331754", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331754" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch", "reference_id": "8037.patch", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:22:43Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/", "reference_id": "GHSL-2024-115_GHSL-2024-118_Gstreamer", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:22:43Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11117", "reference_id": "RHSA-2024:11117", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11117" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11118", "reference_id": "RHSA-2024:11118", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11118" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11120", "reference_id": "RHSA-2024:11120", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11120" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11123", "reference_id": "RHSA-2024:11123", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11123" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11130", "reference_id": "RHSA-2024:11130", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11130" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11141", "reference_id": "RHSA-2024:11141", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11141" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11142", "reference_id": "RHSA-2024:11142", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11142" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11143", "reference_id": "RHSA-2024:11143", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11143" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11344", "reference_id": "RHSA-2024:11344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11345", "reference_id": "RHSA-2024:11345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11345" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0024.html", "reference_id": "sa-2024-0024.html", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:22:43Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0024.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47607" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9wre-pzu1-y3a7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/64262?format=api", "vulnerability_id": "VCID-a2rd-ntzd-2kdr", "summary": "GStreamer: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2921.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2921.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-2921", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09324", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09377", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09374", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09285", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09361", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09408", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.0942", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09391", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10442", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10489", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.1053", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10586", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10419", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10408", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10351", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10296", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10509", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10333", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10307", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00035", "scoring_system": "epss", "scoring_elements": "0.10437", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-2921" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2921", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2921" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447496", "reference_id": "2447496", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447496" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e3a99c35266fc92dd6a18ac5fde028d0cda559e6", "reference_id": "e3a99c35266fc92dd6a18ac5fde028d0cda559e6", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-16T15:26:01Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e3a99c35266fc92dd6a18ac5fde028d0cda559e6" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:6259", "reference_id": "RHSA-2026:6259", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:6259" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:6300", "reference_id": "RHSA-2026:6300", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:6300" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:6750", "reference_id": "RHSA-2026:6750", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:6750" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7673", "reference_id": "RHSA-2026:7673", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7673" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:7850", "reference_id": "RHSA-2026:7850", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:7850" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8854", "reference_id": "RHSA-2026:8854", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8854" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8857", "reference_id": "RHSA-2026:8857", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8857" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8862", "reference_id": "RHSA-2026:8862", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8862" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8874", "reference_id": "RHSA-2026:8874", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8874" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8876", "reference_id": "RHSA-2026:8876", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8876" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:9446", "reference_id": "RHSA-2026:9446", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:9446" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:9447", "reference_id": "RHSA-2026:9447", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:9447" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:9487", "reference_id": "RHSA-2026:9487", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:9487" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:9488", "reference_id": "RHSA-2026:9488", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:9488" }, { "reference_url": "https://usn.ubuntu.com/8130-1/", "reference_id": "USN-8130-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/8130-1/" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-26-168/", "reference_id": "ZDI-26-168", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-16T15:26:01Z/" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-168/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2026-2921" ], "risk_score": 3.5, "exploitability": "0.5", "weighted_severity": "7.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-a2rd-ntzd-2kdr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36382?format=api", "vulnerability_id": "VCID-b22v-3x5y-kbbx", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47600.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47600.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47600", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28113", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.28156", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38829", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.3879", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38842", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38853", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38866", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38802", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38848", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38826", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38746", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.3858", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38556", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00174", "scoring_system": "epss", "scoring_elements": "0.38468", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59283", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59218", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59309", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59267", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59324", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00377", "scoring_system": "epss", "scoring_elements": "0.59381", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47600" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47600", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47600" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331738", "reference_id": "2331738", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331738" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch", "reference_id": "8034.patch", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:27:40Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/", "reference_id": "GHSL-2024-248_Gstreamer", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:27:40Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7243", "reference_id": "RHSA-2025:7243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7243" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0018.html", "reference_id": "sa-2024-0018.html", "reference_type": "", "scores": [ { "value": "5.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:27:40Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0018.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47600" ], "risk_score": 2.3, "exploitability": "0.5", "weighted_severity": "4.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b22v-3x5y-kbbx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68429?format=api", "vulnerability_id": "VCID-bd83-n2qx-gqeh", "summary": "gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47807.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47807.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47807", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07055", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07292", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07111", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07086", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07139", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07171", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07168", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07301", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07223", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07218", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00026", "scoring_system": "epss", "scoring_elements": "0.07344", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.093", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09338", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00032", "scoring_system": "epss", "scoring_elements": "0.09384", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.10745", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.10672", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.10653", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.10696", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.1047", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00036", "scoring_system": "epss", "scoring_elements": "0.10606", "published_at": "2026-05-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47807" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47807", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47807" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387143", "reference_id": "2387143", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387143" }, { "reference_url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md", "reference_id": "ATREDIS-2025-0003.md", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-12T13:52:51Z/" } ], "url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md" }, { "reference_url": "https://gstreamer.freedesktop.org/security/", "reference_id": "security", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-12T13:52:51Z/" } ], "url": "https://gstreamer.freedesktop.org/security/" }, { "reference_url": "https://usn.ubuntu.com/7716-1/", "reference_id": "USN-7716-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7716-1/" }, { "reference_url": "https://usn.ubuntu.com/7827-1/", "reference_id": "USN-7827-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7827-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2025-47807" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bd83-n2qx-gqeh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36370?format=api", "vulnerability_id": "VCID-gw57-rwva-r7fb", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47541.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47541.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47541", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25345", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00088", "scoring_system": "epss", "scoring_elements": "0.25385", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35779", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35738", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35788", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.3581", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35819", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35756", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35797", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35785", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35737", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35502", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35471", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00151", "scoring_system": "epss", "scoring_elements": "0.35385", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47271", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47245", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47302", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47309", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47328", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00241", "scoring_system": "epss", "scoring_elements": "0.47372", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47541" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47541", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47541" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331724", "reference_id": "2331724", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331724" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8036.patch", "reference_id": "8036.patch", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:33:06Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8036.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-228_GStreamer/", "reference_id": "GHSL-2024-228_GStreamer", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:33:06Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-228_GStreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7243", "reference_id": "RHSA-2025:7243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7243" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0023.html", "reference_id": "sa-2024-0023.html", "reference_type": "", "scores": [ { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:33:06Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0023.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47541" ], "risk_score": 2.8, "exploitability": "0.5", "weighted_severity": "5.6", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-gw57-rwva-r7fb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36367?format=api", "vulnerability_id": "VCID-j8pf-ztyq-1ufd", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47538.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47538.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47538", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28244", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28341", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28384", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28175", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.2824", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28282", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28288", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28186", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28199", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28182", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28137", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.28053", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.27941", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00103", "scoring_system": "epss", "scoring_elements": "0.27864", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33582", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33658", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33535", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33604", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33648", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.0014", "scoring_system": "epss", "scoring_elements": "0.33559", "published_at": "2026-05-11T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47538" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47538", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47538" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331727", "reference_id": "2331727", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331727" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8035.patch", "reference_id": "8035.patch", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:36:36Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8035.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/", "reference_id": "GHSL-2024-115_GHSL-2024-118_Gstreamer", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:36:36Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11117", "reference_id": "RHSA-2024:11117", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11117" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11118", "reference_id": "RHSA-2024:11118", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11118" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11120", "reference_id": "RHSA-2024:11120", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11120" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11123", "reference_id": "RHSA-2024:11123", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11123" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11130", "reference_id": "RHSA-2024:11130", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11130" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11141", "reference_id": "RHSA-2024:11141", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11141" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11142", "reference_id": "RHSA-2024:11142", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11142" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11143", "reference_id": "RHSA-2024:11143", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11143" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11344", "reference_id": "RHSA-2024:11344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2024:11345", "reference_id": "RHSA-2024:11345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2024:11345" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0022.html", "reference_id": "sa-2024-0022.html", "reference_type": "", "scores": [ { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-12T14:36:36Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0022.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47538" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "7.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j8pf-ztyq-1ufd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36400?format=api", "vulnerability_id": "VCID-jkag-wv9p-5yhm", "summary": "Multiple vulnerabilities have been discovered in GStreamer and GStreamer Plugins, the worst of which could lead to code execution.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47835.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-47835.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47835", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23294", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23199", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23187", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2318", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23076", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23161", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23235", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23216", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23528", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23565", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23347", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2342", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2347", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23488", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.2345", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23395", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23412", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23407", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00079", "scoring_system": "epss", "scoring_elements": "0.23389", "published_at": "2026-04-21T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-47835" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47835", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47835" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331742", "reference_id": "2331742", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331742" }, { "reference_url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8039.patch", "reference_id": "8039.patch", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-11T21:14:03Z/" } ], "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8039.patch" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-263_Gstreamer/", "reference_id": "GHSL-2024-263_Gstreamer", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-11T21:14:03Z/" } ], "url": "https://securitylab.github.com/advisories/GHSL-2024-263_Gstreamer/" }, { "reference_url": "https://security.gentoo.org/glsa/202506-02", "reference_id": "GLSA-202506-02", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202506-02" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2025:7243", "reference_id": "RHSA-2025:7243", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2025:7243" }, { "reference_url": "https://gstreamer.freedesktop.org/security/sa-2024-0029.html", "reference_id": "sa-2024-0029.html", "reference_type": "", "scores": [ { "value": "6.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-12-11T21:14:03Z/" } ], "url": "https://gstreamer.freedesktop.org/security/sa-2024-0029.html" }, { "reference_url": "https://usn.ubuntu.com/7175-1/", "reference_id": "USN-7175-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7175-1/" }, { "reference_url": "https://usn.ubuntu.com/7807-1/", "reference_id": "USN-7807-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7807-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2024-47835" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jkag-wv9p-5yhm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68430?format=api", "vulnerability_id": "VCID-k198-ngub-ayfx", "summary": "gstreamer1-plugins-base: GStreamer Subparse Stack Buffer Overflow", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47806.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47806.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47806", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22633", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22676", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22602", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22548", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22466", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00075", "scoring_system": "epss", "scoring_elements": "0.22618", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23919", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23865", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23876", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00081", "scoring_system": "epss", "scoring_elements": "0.23846", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28955", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.29137", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.29026", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.3087", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.30859", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.3078", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.30803", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.30864", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00122", "scoring_system": "epss", "scoring_elements": "0.30789", "published_at": "2026-05-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47806" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47806", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47806" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387145", "reference_id": "2387145", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387145" }, { "reference_url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md", "reference_id": "ATREDIS-2025-0003.md", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-08T15:45:02Z/" } ], "url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md" }, { "reference_url": "https://gstreamer.freedesktop.org/security/", "reference_id": "security", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-08T15:45:02Z/" } ], "url": "https://gstreamer.freedesktop.org/security/" }, { "reference_url": "https://usn.ubuntu.com/7716-1/", "reference_id": "USN-7716-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7716-1/" }, { "reference_url": "https://usn.ubuntu.com/7827-1/", "reference_id": "USN-7827-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7827-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2025-47806" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k198-ngub-ayfx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/68431?format=api", "vulnerability_id": "VCID-ye91-ftez-j7bb", "summary": "gstreamer1-plugins-base: GStreamer Subparse NULL Pointer Dereference", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47808.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-47808.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47808", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.2548", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.25517", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.254", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.25355", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.25288", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00089", "scoring_system": "epss", "scoring_elements": "0.25412", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00097", "scoring_system": "epss", "scoring_elements": "0.26713", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00097", "scoring_system": "epss", "scoring_elements": "0.2677", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00097", "scoring_system": "epss", "scoring_elements": "0.26721", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00097", "scoring_system": "epss", "scoring_elements": "0.26692", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00097", "scoring_system": "epss", "scoring_elements": "0.26657", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00131", "scoring_system": "epss", "scoring_elements": "0.32257", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00131", "scoring_system": "epss", "scoring_elements": "0.32456", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00131", "scoring_system": "epss", "scoring_elements": "0.32341", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34603", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34612", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34509", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34535", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34502", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34574", "published_at": "2026-05-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47808" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47808", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-47808" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387146", "reference_id": "2387146", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2387146" }, { "reference_url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md", "reference_id": "ATREDIS-2025-0003.md", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T19:49:18Z/" } ], "url": "https://github.com/atredispartners/advisories/blob/master/2025/ATREDIS-2025-0003.md" }, { "reference_url": "https://gstreamer.freedesktop.org/security/", "reference_id": "security", "reference_type": "", "scores": [ { "value": "5.6", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-08-07T19:49:18Z/" } ], "url": "https://gstreamer.freedesktop.org/security/" }, { "reference_url": "https://usn.ubuntu.com/7716-1/", "reference_id": "USN-7716-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7716-1/" }, { "reference_url": "https://usn.ubuntu.com/7827-1/", "reference_id": "USN-7827-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/7827-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050596?format=api", "purl": "pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%2Bdeb12u5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" } ], "aliases": [ "CVE-2025-47808" ], "risk_score": 2.5, "exploitability": "0.5", "weighted_severity": "5.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ye91-ftez-j7bb" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/gst-plugins-base1.0@1.22.0-3%252Bdeb12u5" }