USN-8205-1
- Source
- https://ubuntu.com/security/notices/USN-8205-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8205-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-8205-1
- Upstream
- Related
- Published
- 2026-04-23T12:16:49Z
- Modified
- 2026-04-27T19:13:59.570338884Z
- Summary
- gst-plugins-bad1.0 vulnerabilities
- Details
-
It was discovered that multiple plugins in GStreamer contained arithmetic overflows. An attacker could possibly use this issue to cause applications using the plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-37329, CVE-2023-40474, CVE-2023-40475, CVE-2023-40476)
It was discovered that the MXF demuxer plugin in GStreamer did not properly manage memory. An attacker could possibly use this issue to cause applications using the plugin to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-44446)
It was discovered that the H265 codec plugin in GStreamer could be made to write out of bounds. An attacker could possibly use this issue to cause applications using the plugin to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-3887)
- References
-
- https://ubuntu.com/security/notices/USN-8205-1
- https://ubuntu.com/security/CVE-2023-37329
- https://ubuntu.com/security/CVE-2023-40474
- https://ubuntu.com/security/CVE-2023-40475
- https://ubuntu.com/security/CVE-2023-40476
- https://ubuntu.com/security/CVE-2023-44446
- https://ubuntu.com/security/CVE-2025-3887
Affected packages
Ubuntu:Pro:16.04:LTS / gst-plugins-bad1.0
Package
- Name
- gst-plugins-bad1.0
- Purl
- pkg:deb/ubuntu/gst-plugins-bad1.0@1.8.3-1ubuntu0.2+esm1?arch=source&distro=esm-apps/xenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.8.3-1ubuntu0.2+esm1
Affected versions
1.*
1.6.0-1ubuntu1
1.6.1-1ubuntu1
1.6.2-1ubuntu1
1.7.1-1ubuntu1
1.7.1-1ubuntu3
1.7.1-1ubuntu4
1.7.2-1ubuntu1
1.7.90-1ubuntu2
1.7.91-1ubuntu1
1.8.0-1ubuntu1
1.8.1-1ubuntu0.1
1.8.2-1ubuntu0.1
1.8.2-1ubuntu0.2
1.8.3-1ubuntu0.2
Ecosystem specific
{
"binaries": [
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "gir1.2-gst-plugins-bad-1.0"
},
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "gstreamer1.0-hybris"
},
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "gstreamer1.0-plugins-bad"
},
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "gstreamer1.0-plugins-bad-faad"
},
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "gstreamer1.0-plugins-bad-videoparsers"
},
{
"binary_version": "1.8.3-1ubuntu0.2+esm1",
"binary_name": "libgstreamer-plugins-bad1.0-0"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"cves": [
{
"id": "CVE-2023-37329",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40474",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40475",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40476",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-44446",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-3887",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8205-1.json"
Ubuntu:Pro:18.04:LTS / gst-plugins-bad1.0
Package
- Name
- gst-plugins-bad1.0
- Purl
- pkg:deb/ubuntu/gst-plugins-bad1.0@1.14.5-0ubuntu1~18.04.1+esm1?arch=source&distro=esm-apps/bionic
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.14.5-0ubuntu1~18.04.1+esm1
Affected versions
1.*
1.12.3-1ubuntu1
1.12.3-1ubuntu2
1.12.3-2ubuntu1
1.12.4-2ubuntu1
1.12.4-2ubuntu2
1.13.1-1ubuntu1
1.13.91-1ubuntu1
1.14.0-1ubuntu1
1.14.1-1ubuntu1~ubuntu18.04.1
1.14.4-1ubuntu1~ubuntu18.04.1
1.14.5-0ubuntu1~18.04.1
Ecosystem specific
{
"binaries": [
{
"binary_version": "1.14.5-0ubuntu1~18.04.1+esm1",
"binary_name": "gir1.2-gst-plugins-bad-1.0"
},
{
"binary_version": "1.14.5-0ubuntu1~18.04.1+esm1",
"binary_name": "gstreamer1.0-opencv"
},
{
"binary_version": "1.14.5-0ubuntu1~18.04.1+esm1",
"binary_name": "gstreamer1.0-plugins-bad"
},
{
"binary_version": "1.14.5-0ubuntu1~18.04.1+esm1",
"binary_name": "libgstreamer-opencv1.0-0"
},
{
"binary_version": "1.14.5-0ubuntu1~18.04.1+esm1",
"binary_name": "libgstreamer-plugins-bad1.0-0"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
Database specific
cves_map
{
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"cves": [
{
"id": "CVE-2023-37329",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40474",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40475",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-40476",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2023-44446",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-3887",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "high"
}
]
}
]
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8205-1.json"