Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h3r-68m6-vm7c

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

EPSS

Процентиль: 25%
0.00086
Низкий

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
5 месяцев назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 5.6
redhat
5 месяцев назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 8.1
nvd
5 месяцев назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 8.1
debian
5 месяцев назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak fu ...

CVSS3: 3.3
fstec
8 месяцев назад

Уязвимость плагина gst-plugins-good мультимедийного фреймворка Gstreamer, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 25%
0.00086
Низкий

8.1 High

CVSS3

Дефекты

CWE-125