Описание
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible. The highest threat from this vulnerability is to system availability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | gstreamer-plugins-base | Out of support scope | ||
| Red Hat Enterprise Linux 7 | gstreamer-plugins-base | Out of support scope |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1954761gstreamer-plugins-base: out-of-bounds read when handling certain ID3v2 tags
EPSS
Процентиль: 30%
0.00106
Низкий
5.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.5
ubuntu
около 4 лет назад
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS3: 5.5
nvd
около 4 лет назад
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS3: 5.5
debian
около 4 лет назад
GStreamer before 1.18.4 may perform an out-of-bounds read when handlin ...
EPSS
Процентиль: 30%
0.00106
Низкий
5.5 Medium
CVSS3