CVE-2023-40475 is a high-severity integer overflow vulnerability in GStreamer's MXF file parsing, allowing remote code execution. Attackers can exploit this flaw by crafting malicious MXF video files, leading to arbitrary code execution in the context of the current process. The CVSS score is 8.8 (High), indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability, requiring user interaction. Currently, there is no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.22.6CPE matchmatch criteria | cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
HP ThinPro 8.1 SP 2 Security Updates
Apr 12, 2024HP ThinPro 8.1 SP 2 Security Updates
Apr 12, 2024gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with AES3 audio
Sep 20, 2023