rpm package
almalinux/gstreamer1-plugins-good-gtk
pkg:rpm/almalinux/gstreamer1-plugins-good-gtk
Vulnerabilities (47)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-1925 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be | |
| CVE-2022-1924 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS ca | |
| CVE-2022-1923 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS | |
| CVE-2022-1922 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the unde | |
| CVE-2022-1921 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite. | |
| CVE-2022-1920 | Hig | 7.8 | < 1.18.4-6.el9 | 1.18.4-6.el9 | Jul 19, 2022 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite. | |
| CVE-2021-3497 | Hig | 7.8 | < 1.16.1-3.el8 | 1.16.1-3.el8 | Apr 19, 2021 | GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. |
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS ca
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the unde
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite.
- affected < 1.18.4-6.el9fixed 1.18.4-6.el9
Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.
- affected < 1.16.1-3.el8fixed 1.16.1-3.el8
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
Page 3 of 3