A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when pro...
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Ubuntu:Pro:16.04:LTSgst-plugins-good1.0 |
All versions→ Not listed |
Not listed |
| Ubuntu:Pro:18.04:LTSgst-plugins-good1.0 |
All versions→ Not listed |
Not listed |
| Ubuntu:Pro:20.04:LTSgst-plugins-good1.0 |
All versions→ Not listed |
Not listed |
| Ubuntu:22.04:LTSgst-plugins-good1.0 |
All versions→ Not listed |
Not listed |
| Ubuntu:24.04:LTSgst-plugins-good1.0 |
All versions→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A flaw was found in GStreamer's gst-plugins-good package. The FLV media demuxer does not properly validate buffer sizes and data availability when processing enhanced audio and video tags in malformed or truncated FLV streams. A remote attacker could exploit this vulnerability by providing a specially crafted FLV media file that, when opened or streamed by a GStreamer-based application, triggers an assertion failure or a process crash, leading to denial of service.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- report ubuntu.com
- report cve.org
- report bugzilla.redhat.com
- report access.redhat.com
- report gitlab.freedesktop.org
- report gstreamer.freedesktop.org