CVE-2022-1925
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_d...
Original description
The description as published by the source.
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-1925 gst-plugins-good1.0 Fixed in: 1.18.4-2+deb11u1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report gitlab.freedesktop.org
- web lists.debian.org