What’s Vulnerable › Vulnerabilities

CVE-2024-44331

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-22 · updated 2026-06-17
• Weakness: CWE-120

Description

Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests.

Affected products

• Gstreamer Project Gst-Rtsp-Server: 1.25.0

References

• https://gist.github.com/dqp10515/c6a8879bebe92d8c74f7c52667fd3400
• https://github.com/dqp10515/security/tree/main/gst-rtsp-server_bug/bug1

Get alerted when CVE-2024-44331 or the next vulnerability affects your stack