Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8h3r-68m6-vm7c

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

EPSS

Процентиль: 19%
0.00061
Низкий

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.1
ubuntu
4 месяца назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 5.6
redhat
4 месяца назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 8.1
nvd
4 месяца назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.

CVSS3: 8.1
debian
4 месяца назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak fu ...

CVSS3: 3.3
fstec
6 месяцев назад

Уязвимость плагина gst-plugins-good мультимедийного фреймворка Gstreamer, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 19%
0.00061
Низкий

8.1 High

CVSS3

Дефекты

CWE-125