Unrated
GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.
CVE-2021-3498
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2021-3498 gstreamer Fixed in: 1.18.4-r0
- Debian DEBIAN-CVE-2021-3498 gst-plugins-good1.0 Fixed in: 1.18.4-2
References
- advisory packetstormsecurity.com
- advisory gstreamer.freedesktop.org
- advisory security.gentoo.org
- advisory debian.org
- patch bugzilla.redhat.com