Количество 10
Количество 10
GHSA-j3jj-fwr8-4v9m
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents.
CVE-2026-53704
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents.
CVE-2026-53704
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents.
CVE-2026-53704
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents.
CVE-2026-53704
A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-u ...
ROS-20260922-80-0044
Уязвимость gstreamer1-plugins-ugly-free
ROS-20260922-80-0042
Уязвимость gstreamer1-plugins-ugly
ROS-20260922-73-0029
Уязвимость gstreamer1-plugins-ugly
RLSA-2026:36674
Moderate: gstreamer1-plugins-ugly-free security update
ELSA-2026-36674
ELSA-2026-36674: gstreamer1-plugins-ugly-free security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-j3jj-fwr8-4v9m A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53704 A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53704 A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-53704 A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-ugly package. When processing a RealMedia file containing a specially crafted FILEINFO metadata section, the demuxer parses variable-name and variable-value pairs using re_skip_pascal_string() without validating that offsets remain within the mapped buffer. Additionally, the element count controlling the parsing loop is read from attacker-controlled data without validation, which can cause an infinite loop. A crafted RealMedia file can cause the application to crash, hang, or potentially read limited adjacent memory contents. | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-53704 A flaw was found in GStreamer's RealMedia demuxer in the gst-plugins-u ... | CVSS3: 7.1 | 0% Низкий | 3 месяца назад |
 | ROS-20260922-80-0044 Уязвимость gstreamer1-plugins-ugly-free | CVSS3: 7.1 | 0% Низкий | 3 дня назад |
| ROS-20260922-80-0042 Уязвимость gstreamer1-plugins-ugly | CVSS3: 7.1 | 0% Низкий | 3 дня назад |
| ROS-20260922-73-0029 Уязвимость gstreamer1-plugins-ugly | CVSS3: 7.1 | 0% Низкий | 3 дня назад |
 | RLSA-2026:36674 Moderate: gstreamer1-plugins-ugly-free security update | 3 месяца назад | ||
| ELSA-2026-36674 ELSA-2026-36674: gstreamer1-plugins-ugly-free security update (MODERATE) | 3 месяца назад |
Уязвимостей на страницу