XFCE tumbler -- Vulnerability in the GStreamer plugin

The XFCE project reports: Added mime type check to the gst-thumbnailer plugin to fix an undisclosed vulnerability...

BSA-2022-2026

Security Advisory ID : BSA-2022-2026 Component : Oracle Java SE Revision : 1.0 GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags. Affected Products Brocade SANnav versions before v2.2.1...

CVE-2022-2122

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemuxinflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a...

CVE-2022-1922

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

CVE-2022-1922

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow when zlib decodes gstmatroskadecompressdata encoded data, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow when zlib decodes gstmatroskadecompressdata encoded data, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskaparse element of the gstmatroskadecompressdata function, resulting in a heap overflow that can be exploited by an...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for handling streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from an integer overflow in the qtdemux element of the qtdemuxinflate function, resulting in a segmentation error that can be exploited by an attacker to...

PT-2022-5193 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska demux add wvpk header function of the Gstreamer multimedia framework, which can lead to a heap overwrite when parsing matros...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskademux element of the gstmatroskadecompressdata function, which results in a segmentation error that can ...

PT-2022-5205 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska decompress data function of the matroskademux element, which can lead to a segfault or a potential heap overwrite, depending...

PT-2022-5196 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is related to a potential heap overwrite in the qtdemux element using zlib decompression. This is caused by an integer overflow in the qtdemux inflate function, which can result...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from a heap override in gstmatroskademuxaddwvpkheader, and can be exploited by an attacker to cause a system crash...

PT-2022-5192 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst avi demux invert function of the avidemux element in the Gstreamer multimedia framework. This overflow allows a heap overwrite while...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow in the avidemux element of the gstavidemuxinvert function, which allows heap overwriting when parsing avi files, and can be exploite...

EulerOS 2.0 SP3 : gstreamer-plugins-bad-free (EulerOS-SA-2022-1727)

According to the versions of the gstreamer-plugins-bad-free package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an...

Huawei EulerOS: Security Advisory for gstreamer-plugins-bad-free (EulerOS-SA-2022-1727)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6791 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is related to an integer overflow in the matroskademux element in the lzo decompression function, which can cause a segfault or potentially a heap overwrite, depending on the li...

PT-2022-6790 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is related to an integer overflow in the matroskademux element in the bzip decompression function, which can cause a segfault or potentially a heap overwrite, depending on the...