CVE-2022-1925

2022-07-1920:15:11

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.9%

JSON

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can’t be triggered, however the matroskaparse element has no size checks.

CPENameOperatorVersion
gstreamereqgst-plugins-good-0.9.1
gstreamereqgstreamer-vaapi-1.15.2
gstreamereqgst-plugins-base-0.10.1
gstreamereqgstreamer-vaapi-1.15.1
gstreamereqgst-plugins-base-0.10.12
gstreamereqBRANCH-EVENTS1-200110161-ROOT
gstreamereq1.13.90
gstreamereqgst-omx-1.16.0
gstreamereqgst-plugins-good-1.11.91
gstreamereq1.7.2

Name	Operator	Version
gstreamer	eq	gst-plugins-good-0.9.1
gstreamer	eq	gstreamer-vaapi-1.15.2
gstreamer	eq	gst-plugins-base-0.10.1
gstreamer	eq	gstreamer-vaapi-1.15.1
gstreamer	eq	gst-plugins-base-0.10.12
gstreamer	eq	BRANCH-EVENTS1-200110161-ROOT
gstreamer	eq	1.13.90
gstreamer	eq	gst-omx-1.16.0
gstreamer	eq	gst-plugins-good-1.11.91
gstreamer	eq	1.7.2