Search for packages
| purl | pkg:deb/debian/gst-plugins-bad0.10@0.10.7-2%2Blenny2 |
| Next non-vulnerable version | 0.10.23-7.4+deb8u2 |
| Latest non-vulnerable version | 0.10.23-7.4+deb8u2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5pqg-zx2g-7qhv
Aliases: CVE-2016-9447 |
gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder |
Affected by 0 other vulnerabilities. |
|
VCID-rnq7-9xzc-zfcv
Aliases: CVE-2015-0797 |
Security researcher Aki Helin used the Address Sanitizer tool to find a buffer overflow during video playback on Linux systems. This was due to a problem in older versions of the Gstreamer plugin during the parsing of H.264 formatted video. This issue could be used to induce a possibly exploitable crash. This issue does not affect the current 1.0 version of Gstreamer and does not affect Windows or OS X systems. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-08-01T10:24:01.966558+00:00 | Debian Oval Importer | Affected by | VCID-5pqg-zx2g-7qhv | https://www.debian.org/security/oval/oval-definitions-jessie.xml.bz2 | 37.0.0 |
| 2025-08-01T09:30:05.429697+00:00 | Debian Oval Importer | Affected by | VCID-rnq7-9xzc-zfcv | https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2 | 37.0.0 |