Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44692
HistoryDec 15, 2023 - 6:33 a.m.

Improper Input Validation

2023-12-1506:33:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
libreoffice
vulnerability
gstreamer
input validation
arbitrary execution

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

libreoffice is vulnerable to Execution with Unnecessary Privileges. The vulnerability is due to there is no sanitization or escaping for the filename of an embedded video when it is passed to GStreamer. This flaw allows an attacker to execute arbitrary GStreamer plugins.