CVE-2016-10199

The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted tag value...

CVE-2017-5846

The gstasfdemuxprocessextstreamprops function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via vectors related to the number of languages in a video file...

CVE-2017-5838

CVE-2017-5838 affects the GStreamer 1.x framework (before 1.10.3). The vulnerability is in gst_date_time_new_from_iso8601_string (gst/gstdatetime.c) and allows a remote attacker to cause a denial of service via an out-of-bounds heap read when processing a malformed datetime string. Affected produ...

CVE-2017-5848

The CVE-2017-5848 entry affects GStreamer’s gst-plugins-bad suite, specifically the gst_ps_demux_parse_psm function in gst-mpegdemux/gstmpegdemux.c. Affected component: GStreamer plugins-bad. Root cause: remote parsing of PSM can lead to an invalid memory read, crashing the process and enabling a...

CVE-2017-5846

CVE-2017-5846 affects GStreamer gst-plugins-ugly before 1.10.3, where gst_asf_demux_process_ext_stream_props in gst/asfdemux/gstasfdemux.c can trigger an invalid memory read and crash when processing video files with a certain number of languages. Impact described as denial of service; remote att...

CVE-2017-5846

The gstasfdemuxprocessextstreamprops function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via vectors related to the number of languages in a video file...

CVE-2017-5841

The CVE-2017-5841 entry affects the GStreamer project, specifically the gst-plugins-good component. It concerns the gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c and is exploitable via crafted audiovisual files to trigger an out-of-bounds heap read, causing a denial of service. Publi...

CVE-2016-10198

GStreamer gst-plugins-good up to version 1.10.3 is affected by CVE-2016-10198 in the aacparse element (gst_aac_parse_sink_setcaps). A crafted audio file can trigger an invalid memory read, causing a crash and denial of service. Upstream fixes and distributions have addressed this by upgrading to ...

CVE-2017-5845

The CVE-2017-5845 issue affects GStreamer gst-plugins-good prior to 1.10.3. The vulnerability is in the gst_avi_demux_parse_ncdt function, allowing remote attackers to trigger a denial of service (invalid memory read and crash) via a crafted ncdt sub-tag. Public advisories (Debian, Arch, Gentoo/C...

CVE-2017-5842

The htmlcontexthandleelement function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds write via a crafted SMI file, as demonstrated by OneNoteManager.smi...

CVE-2017-5840

The qtdemuxparsesamples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving the current stts index...

CVE-2017-5838

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

CVE-2017-5841

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via vectors involving ncdt tags...

CVE-2016-10199

The CVE-2016-10199 issue affects GStreamer’s gst-plugins-good before version 1.10.3, where the qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c can trigger an out-of-bounds read leading to a crash (denial of service). Public sources in connected documents confirm upstream fixes; remediat...

CVE-2017-5842

The htmlcontexthandleelement function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds write via a crafted SMI file, as demonstrated by OneNoteManager.smi...

CVE-2016-10198

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

CVE-2017-5837

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted video file...

CVE-2017-5844

The gstriffcreateaudiocaps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3 allows remote attackers to cause a denial of service floating point exception and crash via a crafted ASF file...

CVE-2016-10198

The gstaacparsesinksetcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a crafted audio file...

CVE-2017-5845

The gstavidemuxparsencdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service invalid memory read and crash via a ncdt sub-tag that "goes behind" the surrounding tag...