CVE-2016-9810

The CVE-2016-9810 item applies to GStreamer’s gst-plugins-good flxdex decoder. The affected component is the gst_decode_chain_free_internal function, present in GStreamer versions prior to 1.10.2, where processing an invalid file can trigger an incorrect unref and lead to an invalid memory read, ...

CVE-2016-9809

CVE-2016-9809 concerns an off-by-one error in GStreamer’s H.264 parsing (gst_h264_parse_set_caps) that can cause an out-of-bounds read when processing crafted media files. Multiple advisories across distros (Debian, Debian security tracker, Alpine, Mageia, Gentoo, CentOS) acknowledge this as part...

CVE-2016-9808

GStreamer CVE-2016-9808 affects the FLIC decoder in GStreamer prior to 1.10.2, enabling a remote attacker to trigger a denial-of-service via an out-of-bounds write using crafted skip/count pairs. Affected component: GStreamer FLIC decoder. Impact: crash / DoS. Remediation: upgrade to GStreamer 1....

CVE-2016-9812

The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...

CVE-2016-9807

The flxdecodechunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted FLIC file...

CVE-2016-9808

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

CVE-2016-9812

CVE-2016-9812 affects the GStreamer mpegts decoder (gst_mpegts_section_new) where an out-of-bounds read can be triggered by a too-small section, leading to a denial of service. The vulnerability exists in GStreamer before version 1.10.2 and has been addressed in later releases (e.g., 1.10.2 and b...

CVE-2016-9807

CVE-2016-9807 affects GStreamer’s FLIC decoding in the flx_decode_chunks function (gst/flx/gstflxdec.c). The vulnerability exists in GStreamer before 1.10.2 and allows remote attackers to cause a denial of service via a crafted FLIC file, due to an invalid memory read. The connected Nessus entrie...

CVE-2016-9813

The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2016-9811

The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

CVE-2016-9812

The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...

CVE-2016-9813

The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...

CVE-2016-9811

The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...

CVE-2016-9808

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...

CVE-2016-9809

Off-by-one error in the gsth264parsesetcaps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a crafted file, which triggers an out-of-bounds read...

CVE-2016-9808

The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds write and crash via a crafted series of skip and count pairs...

CVE-2016-9812

The gstmpegtssectionnew function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service out-of-bounds read via a too small section...

CVE-2016-9813

The parsepat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted file...