MGASA-2021-0187: gstreamer1.0-libav Mageia
Vulnerability summary
MGASA-2021-0187 is a vulnerability in gstreamer1.0-libav Mageia with no CVSS score yet.
Timeline
- 15-04-2021PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated gstreamer1.0 packages fix security vulnerabilities GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files (SA-2021-0002). GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files (SA-2021-0003). GStreamer before 1.18.4 might do an out-of-bounds read when handling certain RealMedia files or streams (SA-2021-0004). GStreamer before 1.18.4 might cause stack corruptions with streams that have more than 64 audio channels (SA-2021-0005). It might be possible for a malicious third party to trigger a crash in the application, but possibly also an arbitrary code execution with the privileges of the target user.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia6 products
- gstreamer1.0-libav< 1.16.0-1.1.mga7
- gstreamer1.0-plugins-good< 1.16.0-1.1.mga7
- gstreamer1.0-plugins-ugly< 1.16.0-1.1.mga7 | < 1.16.0-1.1.mga7.tainted
- gstreamer1.0-libav< 1.18.3-1.1.mga8
- gstreamer1.0-plugins-good< 1.18.3-1.2.mga8
1 vendor · 6 products