Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p7rv-557w-hw2m

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

EPSS

Процентиль: 1%
0.00013
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.6
ubuntu
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

CVSS3: 5.6
redhat
12 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

CVSS3: 6.6
nvd
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.

CVSS3: 6.6
debian
11 дней назад

In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree fu ...

suse-cvrf
около 1 месяца назад

Security update for gstreamer-plugins-good

EPSS

Процентиль: 1%
0.00013
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-125