Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44538
HistoryNov 30, 2023 - 9:30 p.m.

Denial Of Service (DoS)

2023-11-3021:30:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
denial of service
integer overflow
lzo decompression
mkv demuxing

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.0%

gst-plugins-good is vulnerable to Denial Of Service (DoS). The vulnerability stems from an integer overflow in the matroskademux element within the LZO decompression function, potentially causing a segmentation fault or the risk of a heap overwrite during MKV demuxing using LZO decompression.