gstreamer1.0-plugins-good 1.16.3-0ubuntu1.3: gstreamer1.0-plugins-good 1.16.3-0ubuntu1.3 for Ubuntu 20.04 LTS (focal)

gstreamer1.0-plugins-good 1.16.3-0ubuntu1.3, released December 11, 2024, fixes 22 CVEs in gstreamer1.0-plugins-good. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0173

77th percentile

Priority of the 22 CVEs

Patch now 0
                                Urgent 0
                                High 22
                                Routine 0

Fixed package versions

Product	Release	Fixed in
gstreamer1.0-plugins-good	Ubuntu 20.04 LTS (focal)	1.16.3-0ubuntu1.3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2024-47606	gstreamer: Avoid integer overflow when allocating sysmem	9.8	0.0173	None reported
High	CVE-2024-47539	gstreamer-plugins-good: Fixed an out-of-bounds write in convert_to_s334_1a	9.8	0.0132	None reported
High	CVE-2024-47597	gstreamer-plugins-good: Fixed an out-of-bounds reads in MP4/MOV demuxer sample table parser (boo#1234425)	9.1	0.0117	None reported
High	CVE-2024-47775	gstreamer-plugins-good: Fixed various out-of-bounds reads in WAV parser	9.1	0.0117	None reported
High	CVE-2024-47776	gstreamer1.0-gtk3: GStreamer is a library for constructing graphs of media-handlingcomponents	9.1	0.0117	None reported
High	CVE-2024-47777	gstreamer1.0-gtk3: GStreamer is a library for constructing graphs of media-handlingcomponents	9.1	0.0117	None reported
High	CVE-2024-47596	gstreamer-plugins-good: Fixed an integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads	7.5	0.0115	None reported
High	CVE-2024-47544	gstreamer-plugins-good: Fixed a NULL-pointer dereferences in MP4/MOV demuxer CENC handling	7.5	0.0108	None reported
High	CVE-2024-47545	gstreamer-plugins-good: Fixed an integer underflow in FOURCC_strf parsing leading to out-of-bounds read	7.5	0.0108	None reported
High	CVE-2024-47546	gstreamer-plugins-good: Fixed an integer underflow in extract_cc_from_data leading to out-of-bounds read	7.5	0.0108	None reported
High	CVE-2024-47540	gstreamer-plugins-good: Fixed uninitialized stack memory in Matroska/WebM demuxer (bsc#1234421).	9.8	0.0101	None reported
High	CVE-2024-47537	gstreamer-plugins-good: Fixed an out-of-bounds write in isomp4/qtdemux.c	9.8	0.0096	None reported
High	CVE-2024-47598	gstreamer-plugins-good: Fixed MP4/MOV sample table parser out-of-bounds read	9.1	0.0095	None reported
High	CVE-2024-47543	gstreamer-plugins-good: Fixed an out-of-bounds write in qtdemux_parse_container	7.5	0.0092	None reported
High	CVE-2024-47602	gstreamer-plugins-good: Fixed a NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer	7.5	0.0092	None reported
High	CVE-2024-47834	gstreamer-plugins-good: Fixed a use-after-free in the Matroska demuxer that can cause crashes for certain input files	9.1	0.0092	None reported
High	CVE-2024-47613	gstreamer-plugins-good: Fixed a NULL-pointer dereference in gdk-pixbuf decoder	9.8	0.0090	None reported
High	CVE-2024-47599	gstreamer-plugins-good: Fixed insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences	7.5	0.0087	None reported
High	CVE-2024-47601	gstreamer-plugins-good: Fixed a NULL-pointer dereference in Matroska/WebM demuxer	7.5	0.0087	None reported
High	CVE-2024-47603	gstreamer-plugins-good: Fixed a NULL-pointer dereference in Matroska/WebM demuxer	7.5	0.0087	None reported
High	CVE-2024-47778	gstreamer-plugins-good: Fixed various out-of-bounds reads in WAV parser	7.5	0.0084	None reported
High	CVE-2024-47774	gstreamer-plugins-good: Fixed an integer overflow in AVI subtitle parser that leads to out-of-bounds reads	9.1	0.0083	None reported

Also fixes CVE-2024-47606

gstreamer1.0-gtk3 1.24.8-1ubuntu1.1
gstreamer1.0-gtk3 on Ubuntu 24.10 (oracular)
gstreamer1.0-plugins-good 1.24.8-1ubuntu1.1
gstreamer1.0-plugins-good on Ubuntu 24.10 (oracular)
gstreamer1.0-pulseaudio 1.24.8-1ubuntu1.1
gstreamer1.0-pulseaudio on Ubuntu 24.10 (oracular)
gstreamer1.0-qt5 1.24.8-1ubuntu1.1
gstreamer1.0-qt5 on Ubuntu 24.10 (oracular)
gstreamer1.0-qt6 1.24.8-1ubuntu1.1
gstreamer1.0-qt6 on Ubuntu 24.10 (oracular)
libgstreamer-plugins-good1.0-0 1.24.8-1ubuntu1.1
libgstreamer-plugins-good1.0-0 on Ubuntu 24.10 (oracular)
gstreamer1.0-gtk3 1.16.3-0ubuntu1.3
gstreamer1.0-gtk3 on Ubuntu 20.04 LTS (focal)
gstreamer1.0-gtk3 1.20.3-0ubuntu1.3
gstreamer1.0-gtk3 on Ubuntu 22.04.1 LTS (jammy)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-focal-gstreamer1.0-plugins-good-1.16.3-0ubuntu1.3">gstreamer1.0-plugins-good 1.16.3-0ubuntu1.3 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.