CVE-2022-1920

Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite...

CVE-2022-1920

Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite...

PT-2022-5191 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska decompress data function of the Gstreamer multimedia framework. This can lead to a potential heap overflow, allowing an...

PT-2022-5193 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska demux add wvpk header function of the Gstreamer multimedia framework, which can lead to a heap overwrite when parsing matros...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. An input validation error vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow when zlib decodes gstmatroskadecompressdata encoded data, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which originates from a heap override in gstmatroskademuxaddwvpkheader, and can be exploited by an attacker to cause a system crash...

GStreamer 输入验证错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which stems from an integer overflow in the matroskaparse element of the gstmatroskadecompressdata function, resulting in a heap overflow that can be exploited by an...

PT-2022-5205 · Gstreamer +8 · Gstreamer +8

Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is caused by an integer overflow in the gst matroska decompress data function of the matroskademux element, which can lead to a segfault or a potential heap overwrite, depending...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc., and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in Qualcomm that originates fr...

CVE-2022-22087

memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-15229 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to memory corruption in video due to a buffer overflow that occurs while parsing an mkv clip with no code checker. This problem affects various...

多款Qualcomm产品缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products,...

Use-After-Free

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash...

Huawei EulerOS: Security Advisory for gstreamer-plugins-good (EulerOS-SA-2021-2584)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gstreamer-plugins-good (EulerOS-SA-2021-2331)

According to the version of the gstreamer-plugins-good package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska...

openSUSE 15 Security Update : gstreamer-plugins-good (openSUSE-SU-2021:1230-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1230-1 advisory. - GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. CVE-2021-34...

SUSE SLED15 / SLES15 Security Update : gstreamer-plugins-good (SUSE-SU-2021:2915-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2915-1 advisory. - CVE-2021-3498: Matroskademux: initialize track context out parameter to NULL before parsing bsc1184735. - CVE-2021-3497:...

openSUSE 15 Security Update : gstreamer-plugins-good (openSUSE-SU-2021:2915-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2915-1 advisory. - GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files. CVE-2021-34...

Huawei EulerOS: Security Advisory for gstreamer-plugins-good (EulerOS-SA-2021-2331)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:2919-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2919-1 advisory. - A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska...