CVE-2016-9810

🗓️ 13 Jan 2017 16:00:00Reported by mitreType

The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (invalid memory read and crash) via an invalid file

Reporter	Title	Published	Views	Family All 65
Tenable Nessus	CentOS 7 : clutter-gst2 / gnome-video-effects / gstreamer-plugins-bad-free / etcgstreamer1 / etc (CESA-2017:2060)	25 Aug 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : gstreamer (EulerOS-SA-2017-1205)	11 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : gstreamer (EulerOS-SA-2017-1206)	11 Sep 201700:00	–	nessus
Tenable Nessus	GLSA-201705-10 : GStreamer plug-ins: User-assisted execution of arbitrary code	18 May 201700:00	–	nessus
Tenable Nessus	MiracleLinux 7 : GStreamer (AXSA:2017-2179:01)	16 Jan 202600:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-0_10-plugins-good (openSUSE-2017-153)	30 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-0_10-plugins-good (openSUSE-2017-402)	3 Apr 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-plugins-good (openSUSE-2017-65)	10 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-plugins-good (openSUSE-2017-83)	17 Jan 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : gstreamer-0_10-plugins-good (openSUSE-2017-88)	17 Jan 201700:00	–	nessus

NVD

Node

gstreamer gstreamerRange≤1.10.1

Source	Link
openwall	www.openwall.com/lists/oss-security/2016/12/05/8
bugzilla	www.bugzilla.gnome.org/show_bug.cgi
securityfocus	www.securityfocus.com/bid/95163
gstreamer	www.gstreamer.freedesktop.org/releases/1.10/
security	www.security.gentoo.org/glsa/201705-10
openwall	www.openwall.com/lists/oss-security/2016/12/01/2
access	www.access.redhat.com/errata/RHSA-2017:2060

13 May 2026 00:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 35.5

EPSS0.00366

CWE-125