Summary
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled
certain malformed media files. An attacker could use these issues to cause
GStreamer Good Plugins to crash, resulting in a denial of service, or
possibly disclose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gst-plugins-good1.0 | 1.20.3-0ubuntu1.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | gst-plugins-good1.0 | 1.24.2-1ubuntu1.2 |
Vulnerabilities 2
-
High 8.1
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer whi…
-
Medium 6.6
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer whi…