EulerOS 2.0 SP8 : gstreamer-plugins-base (EulerOS-SA-2021-2634)

According to the versions of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags. CVE-2021-3522 Note that Tenable Netwo...

EulerOS 2.0 SP5 : gstreamer-plugins-base (EulerOS-SA-2021-2499)

According to the versions of the gstreamer-plugins-base package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags. CVE-2021-3522 Note that Tenable Netwo...

Updated gstreamer1.0-plugins packages fix security vulnerabilities

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags CVE-2021-3522. Overflows in AVC/HEVC NAL unit length calculations, which would lead to allocating infinite amounts of small memory blocks until OOM and could potentially also lead to memory corruptions...

MGASA-2021-0334 Updated gstreamer1.0-plugins packages fix security vulnerabilities

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags CVE-2021-3522. Overflows in AVC/HEVC NAL unit length calculations, which would lead to allocating infinite amounts of small memory blocks until OOM and could potentially also lead to memory corruptions...

OESA-2021-1237 gstreamer-plugins-base security update

GStreamer is a pipeline-based multimedia framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. The formats and processes can be changed in plugins since its plugin-based architecture. This...

Heap-based Buffer Overflow in squell/id3

✍️ Description While testing id3 built from commit 0de713 with Clang 13 +ASan on Ubuntu 20.04.2, we discovered a POC which triggers a heap-buffer-overflow in tag::unbinarize. This particular flaw was discovered with the help of honggfuzz. 🕵️‍♂️ Proof of Concept echo...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

Out-of-bounds

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

CVE-2021-3522 affects GStreamer before 1.18.4, where an out-of-bounds read may occur when handling certain ID3v2 tags. The issue is evidenced in multiple connected documents (e.g., Astra Linux advisory and Amazon Linux advisories) referencing an out-of-bounds read impacting availability. The conc...

CVE-2021-3522: Out-of-bounds Read

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

CVE-2021-3522

A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible. The highest threat from this vulnerability is to system availability...

CVE-2021-3522

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags...

mpg123:read_fuzzer: Use-of-uninitialized-value in INT123_parse_new_id3

Detailed Report: https://oss-fuzz.com/testcase?key=5240665593217024 Project: mpg123 Fuzzing Engine: libFuzzer Fuzz Target: readfuzzer Job Type: libfuzzermsanmpg123 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: INT123parsenewid3 handleid3v2 skipjunk Sanitize...

PT-2021-7958

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.18.4 Description The issue is related to an out-of-bounds read in the handling of certain ID3v2 tags, which could allow a remote attacker to cause a denial of service. Recommendations For versions prior to 1.18.4,...

openSUSE Security Update : wavpack (openSUSE-2021-153)

This update for wavpack fixes the following issues : - Update to version 5.4.0 - CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples bsc1180414 - fixed: disable A32 asm code when building for Apple silicon - fixed: issues with Adobe-style floating-point WAV files - added:...