Summary
Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled
certain malformed media files. An attacker could possibly use this issue to
cause GStreamer Good Plugins to crash, resulting in a denial of service, or
disclose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gst-plugins-good1.0 | 1.14.5-0ubuntu1~18.04.3+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gst-plugins-good1.0 | 1.16.3-0ubuntu1.3+esm1 |
Vulnerabilities 1
-
High 8.1
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer whi…
References
-
report
https://ubuntu.com/security/CVE-2025-47219