Unrated
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
CVE-2021-3497
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2021-3497 gstreamer Fixed in: 1.18.4-r0
- Debian DEBIAN-CVE-2021-3497 gst-plugins-good1.0 Fixed in: 1.18.4-2
References
- advisory gstreamer.freedesktop.org
- advisory lists.debian.org
- advisory security.gentoo.org
- advisory debian.org
- patch bugzilla.redhat.com