A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-good.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade libgsttag-1_0-0Upgrade typelib-1_0-gstrtp-1_0Upgrade gstreamer-plugins-ugly-docUpgrade typelib-1_0-gstwebrtc-1_0Upgrade libgstbadvideo-1_0-0Upgrade libgstfft-1_0-0Upgrade gstreamer-32bitUpgrade libgstinsertbin-1_0-0Upgrade libgstsctp-1_0-0-32bitUpgrade libgstwebrtc-1_0-0-64bitUpgrade libgstallocators-1_0-0-32bitUpgrade libgstpbutils-1_0-0Upgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade libgstbadallocators-1_0-0Upgrade libgstcodecparsers-1_0-0-32bitUpgrade libgstreamer-1_0-0Upgrade libgstmpegts-1_0-0-32bitUpgrade typelib-1_0-gstallocators-1_0Upgrade libgstplay-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade gstreamer-langUpgrade typelib-1_0-gstmpegts-1_0Upgrade typelib-1_0-gstglx11-1_0Upgrade libgstisoff-1_0-0Upgrade typelib-1_0-gstcodecs-1_0Upgrade gstreamer-plugins-base-32bitUpgrade libgstphotography-1_0-0Upgrade gstreamer-plugins-good-gtkUpgrade libgstsctp-1_0-0-64bitUpgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade libgstaudio-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade gstreamer-plugins-good-jackUpgrade gstreamer-plugins-bad-fluidsynthUpgrade libgstrtsp-1_0-0-32bitUpgrade gstreamer-plugins-good-qtqmlUpgrade libgstsctp-1_0-0Upgrade libgstbadaudio-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gstvideo-1_0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstrtp-1_0-0Upgrade libgstriff-1_0-0Upgrade libgstwayland-1_0-0-64bitUpgrade libgstplayer-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade libgstphotography-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade gstreamer-develUpgrade libgstadaptivedemux-1_0-0-32bitUpgrade libgstwebrtc-1_0-0-32bitUpgrade libgstisoff-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade gstreamer-plugins-base-develUpgrade libgstwayland-1_0-0-32bitUpgrade typelib-1_0-gstinsertbin-1_0Upgrade libgstbadbase-1_0-0Upgrade gstreamer-plugins-badUpgrade gstreamer-plugins-ugly-32bitUpgrade gstreamer-plugins-good-extraUpgrade libgstreamer-1_0-0-32bitUpgrade libgstplayer-1_0-0-32bitUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-gstglwayland-1_0Upgrade libgsturidownloader-1_0-0-64bitUpgrade typelib-1_0-gstbadaudio-1_0Upgrade libgstadaptivedemux-1_0-0Upgrade typelib-1_0-gst-1_0Upgrade gstreamer-utilsUpgrade gstreamer-plugins-good-extra-32bitUpgrade libgsturidownloader-1_0-0Upgrade typelib-1_0-gstrtsp-1_0Upgrade libgstplayer-1_0-0-64bitUpgrade libgsttag-1_0-0-32bitUpgrade gstreamer-plugins-ugly-langUpgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade gstreamer-plugins-base-docUpgrade typelib-1_0-gstplay-1_0Upgrade libgstva-1_0-0Upgrade libgstmpegts-1_0-0-64bitUpgrade gstreamer-plugins-uglyUpgrade gstreamer-plugins-good-32bitUpgrade gstreamer-plugins-bad-32bitUpgrade libgstallocators-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstisoff-1_0-0-64bitUpgrade gstreamer-plugins-bad-develUpgrade libgstinsertbin-1_0-0-32bitUpgrade libgstcodecs-1_0-0Upgrade typelib-1_0-gstglegl-1_0Upgrade libgstbadaudio-1_0-0-64bitUpgrade libgstsdp-1_0-0Upgrade libgstegl-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstwayland-1_0-0Upgrade gstreamer-plugins-bad-chromaprint-32bitUpgrade libgstgl-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade gstreamer-plugins-bad-langUpgrade gstreamer-plugins-bad-docUpgrade gstreamer-plugins-baseUpgrade libgsturidownloader-1_0-0-32bitUpgrade libgstapp-1_0-0Upgrade typelib-1_0-gstbadallocators-1_0Upgrade typelib-1_0-gstaudio-1_0Upgrade gstreamer-plugins-base-langUpgrade libgstfft-1_0-0-32bitUpgrade typelib-1_0-gsttag-1_0Upgrade gstreamerUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade libgstvideo-1_0-0Upgrade gstreamer-plugins-base-devel-32bitUpgrade gstreamer-plugins-bad-64bitUpgrade gstreamer-docUpgrade libgstphotography-1_0-0-64bitUpgrade libgstsdp-1_0-0-32bitUpgrade libgstinsertbin-1_0-0-64bitUpgrade libgstmpegts-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstcodecparsers-1_0-0-64bitUpgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade libgstrtsp-1_0-0Upgrade gstreamer-plugins-good-jack-32bitUpgrade libgstvulkan-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade gstreamer-plugins-good-docUpgrade libgstbasecamerabinsrc-1_0-0 | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub