Skip to content
OpenAdvisories
High USN-6798-1 1 CVE

gst-plugins-base1.0 vulnerability

Published May 29, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GStreamer Base Plugins incorrectly handled certain
EXIF metadata. An attacker could possibly use this issue to execute arbitrary
code or cause a crash.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gst-plugins-base1.0 1.16.3-0ubuntu1.3
Ubuntu · 22.04 LTS 22.04:LTS gst-plugins-base1.0 1.20.1-1ubuntu0.2
Ubuntu · 24.04 LTS 24.04:LTS gst-plugins-base1.0 1.24.2-1ubuntu0.1

Vulnerabilities 1

  • High 7.8
    CVE-2024-4453

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability

    GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…

    GStreamer GStreamer gst-plugins-base1.0 gst-plugins-base1.0 Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2024-4453