Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9qf3-vv3w-6xw5

Опубликовано: 15 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

EPSS

Процентиль: 1%
0.00107
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

CVSS3: 5.3
redhat
около 2 месяцев назад

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

CVSS3: 5.3
nvd
около 2 месяцев назад

Multiple out-of-bounds read vulnerabilities were found in GStreamer's pcapparse element. Malformed PCAP records can trigger reads beyond buffer boundaries during IPv4/TCP header parsing. This element is primarily used in debugging pipelines, limiting real-world exposure. A local attacker could trick a user into processing a specially crafted PCAP file, potentially leading to a crash or information disclosure.

CVSS3: 5.3
debian
около 2 месяцев назад

Multiple out-of-bounds read vulnerabilities were found in GStreamer's ...

suse-cvrf
10 дней назад

Security update for gstreamer-plugins-bad

EPSS

Процентиль: 1%
0.00107
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125