CVE-2023-40474
published 2024-05-03CVE-2023-40474: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
PriorityP258high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
1.87%
76.7th percentile
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-21660.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gst-plugins-bad1.0 | < gst-plugins-bad1.0 1.22.0-4+deb12u2 (bookworm) | gst-plugins-bad1.0 1.22.0-4+deb12u2 (bookworm) |
| gstreamer | gstreamer | < 1.22.6 | 1.22.6 |
| gstreamer | gstreamer | — | — |
| ubuntu | gst-plugins-bad1.0 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target file format for exploitation is MXF (Material Exchange Format) video files — detect parsing of MXF files by GStreamer plugins-bad (gst-plugins-bad / gstreamer1-plugins-bad-free) ↗
- →Vulnerable component is the MXF file demuxer in GStreamer Plugins Bad handling uncompressed video streams — monitor for crashes or anomalous heap activity in processes loading gstreamer-plugins-bad when processing MXF files with uncompressed video ↗
- →Attack vector requires user/process interaction with the GStreamer library — look for unexpected process crashes or code execution in the context of applications invoking GStreamer MXF demuxing ↗
- ·Exploitation requires interaction with the GStreamer library; attack vectors vary by implementation — the library must be invoked to parse a malicious MXF file ↗
- ·Red Hat rates this as Moderate impact due to the local-user interaction requirement; remote exploitation depends on how the application exposes GStreamer MXF parsing ↗
- ·Packages on Red Hat Enterprise Linux 6 and 7 are out of support scope and will not receive patches ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_redhat8.8HIGH
vendor_ubuntu8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GStreamer Bad Plugins vulnerabilities
vendor_ubuntu·2026-04-23·CVSS 8.8
CVE-2023-40475 [HIGH] GStreamer Bad Plugins vulnerabilities
Title: GStreamer Bad Plugins vulnerabilities
Summary: Several security issues were fixed in GStreamer Bad Plugins.
It was discovered that multiple plugins in GStreamer contained arithmetic
overflows. An attacker could possibly use this issue to cause applications
using the plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2023-37329, CVE-2023-40474, CVE-2023-40475,
CVE-2023-40476)
It was discovered that the MXF demuxer plugin in GStreamer did not
properly manage memory. An attacker could possibly use this issue to cause
applications using the plugin to crash, resulting in a denial of service,
or possibly execute arbitrary code. (CVE-2023-44446)
It was discovered that the H265 codec plugin in GStreamer could be made
to write out of bounds. An a
Ubuntu
GStreamer Bad Plugins vulnerabilities
vendor_ubuntu·2023-11-29
CVE-2023-40476 GStreamer Bad Plugins vulnerabilities
Title: GStreamer Bad Plugins vulnerabilities
Summary: Several security issues were fixed in GStreamer Bad Plugins.
It was discovered that GStreamer Bad Plugins incorrectly handled certain
media files. A remote attacker could use this issue to cause GStreamer
Bad Plugins to crash, resulting in a denial of service, or possibly
execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2023-40474: gst-plugins-bad1.0 - GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability....
vendor_debian·2023·CVSS 8.8
CVE-2023-40474 [HIGH] CVE-2023-40474: gst-plugins-bad1.0 - GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability....
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660.
Scope: local
bookworm: resolved (fixed in 1.22.0-4+deb12u2)
bullseye: resolved (fixed in 1.18.4-3+deb11u2)
forky: resolved (fixed in 1.22.7-1)
sid: r
Red Hat
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video
vendor_redhat·2022-09-20·CVSS 8.8
CVE-2023-40474 [HIGH] CWE-190 gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video
gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with uncompressed video
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-21660.
A heap-buffer overflow flaw was foun
GHSA
GHSA-j2wr-x8cm-vx8p: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
ghsa_unreviewed·2024-05-03
CVE-2023-40474 [HIGH] CWE-190 GHSA-j2wr-x8cm-vx8p: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21660.
OSV
CVE-2023-40474: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
osv·2024-05-03·CVSS 8.8
CVE-2023-40474 [HIGH] CVE-2023-40474: GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the parsing of MXF video files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-21660.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gstreamer.freedesktop.org/security/sa-2023-0006.htmlhttps://www.zerodayinitiative.com/advisories/ZDI-23-1456/https://gstreamer.freedesktop.org/security/sa-2023-0006.htmlhttps://lists.debian.org/debian-lts-announce/2023/10/msg00038.htmlhttps://www.zerodayinitiative.com/advisories/ZDI-23-1456/
2024-05-03
Published