gstreamer1-plugins-good: OOB-write in isomp4/qtdemux.c

A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer's sample table parser can lead to out-of-bounds writes and NULL-pointer dereferences for certain input files. This vulnerability allows a malicious third party to trigger an application crash and, in the case of...

The vulnerability of the `qtdemux_parse_samples` function (gst/isomp4/qtdemux.c) in the Gstreamer multimedia framework’s Gst-plugins-good plugin allows a hacker to trigger a service failure.

The vulnerability of the qtdemuxparsesamples function located in gst/isomp4/qtdemux.c in the gst-plugins-good plugin for the Gstreamer multimedia framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor ...