CVE-2022-1925
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_d...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-1925 gst-plugins-good1.0 Corrigé dans: 1.18.4-2+deb11u1
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report gitlab.freedesktop.org
- web lists.debian.org