Summary
Shaun Mirani discovered that GStreamer Base Plugins incorrectly handled
certain malformed media files. An attacker could use these issues to cause
GStreamer Base Plugins to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gst-plugins-base1.0 | 1.20.1-1ubuntu0.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | gst-plugins-base1.0 | 1.24.2-1ubuntu0.3 |
Vulnerabilities 3
-
Medium 5.6
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack…
-
Medium 5.6
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while pa…
-
Medium 5.5
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer w…