A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-base.Upgrade media-plugins/gst-plugins-libav. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade typelib-1_0-gstcodecs-1_0Upgrade gstreamer-plugins-base-32bitUpgrade libgstreamer-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstplayer-1_0-0Upgrade gstreamer-plugins-good-qtqmlUpgrade libgstmpegts-1_0-0-32bitUpgrade libgstinsertbin-1_0-0Upgrade libgstwayland-1_0-0-32bitUpgrade libgstriff-1_0-0Upgrade gstreamer-plugins-good-gtkUpgrade gstreamer-32bitUpgrade gstreamer-plugins-ugly-docUpgrade libgstwayland-1_0-0-64bitUpgrade libgstrtp-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade libgstfft-1_0-0Upgrade gstreamer-plugins-good-extraUpgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-langUpgrade libgstwebrtc-1_0-0Upgrade libgstphotography-1_0-0Upgrade libgstplay-1_0-0Upgrade gstreamer-plugins-goodUpgrade libgstisoff-1_0-0Upgrade libgstcodecparsers-1_0-0-32bitUpgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstbadvideo-1_0-0Upgrade libgstbadaudio-1_0-0-32bitUpgrade libgstbadallocators-1_0-0Upgrade typelib-1_0-gstglx11-1_0Upgrade libgstisoff-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstcodecparsers-1_0-0Upgrade libgstphotography-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade gstreamer-develUpgrade libgstrtsp-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstriff-1_0-0-32bitUpgrade libgstsctp-1_0-0Upgrade libgstplayer-1_0-0-32bitUpgrade gstreamer-plugins-base-develUpgrade libgstreamer-1_0-0-32bitUpgrade libgstsctp-1_0-0-32bitUpgrade gstreamer-plugins-good-jackUpgrade libgstpbutils-1_0-0Upgrade gstreamer-plugins-bad-fluidsynthUpgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade libgstwebrtc-1_0-0-32bitUpgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade libgstbadbase-1_0-0Upgrade libgstsctp-1_0-0-64bitUpgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade libgsttag-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade libgstadaptivedemux-1_0-0-32bitUpgrade gstreamer-plugins-ugly-32bitUpgrade libgstapp-1_0-0-32bitUpgrade typelib-1_0-gstinsertbin-1_0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-badUpgrade libgstwebrtc-1_0-0-64bitUpgrade libgstrtp-1_0-0-32bitUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstvideo-1_0-0Upgrade gstreamer-plugins-bad-64bitUpgrade typelib-1_0-gstglegl-1_0Upgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade libgstrtsp-1_0-0Upgrade libgstadaptivedemux-1_0-0Upgrade libgstcodecparsers-1_0-0-64bitUpgrade libgstvulkan-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade libgsturidownloader-1_0-0-64bitUpgrade typelib-1_0-gstgl-1_0Upgrade gstreamer-plugins-ugly-langUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstisoff-1_0-0-64bitUpgrade gstreamer-plugins-good-docUpgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstplay-1_0Upgrade libgstgl-1_0-0-32bitUpgrade libgsturidownloader-1_0-0-32bitUpgrade gstreamer-plugins-bad-docUpgrade gstreamer-plugins-bad-chromaprint-32bitUpgrade gstreamer-plugins-baseUpgrade libgstgl-1_0-0Upgrade libgstsdp-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstallocators-1_0-0Upgrade typelib-1_0-gst-1_0Upgrade libgstapp-1_0-0Upgrade typelib-1_0-gstbadaudio-1_0Upgrade gstreamerUpgrade libgstbadaudio-1_0-0-64bitUpgrade libgstva-1_0-0Upgrade libgstmpegts-1_0-0-64bitUpgrade libgstcodecs-1_0-0Upgrade typelib-1_0-gstbadallocators-1_0Upgrade gstreamer-plugins-bad-32bitUpgrade gstreamer-plugins-good-32bitUpgrade libgsturidownloader-1_0-0Upgrade gstreamer-plugins-uglyUpgrade libgstsdp-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade gstreamer-utilsUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade typelib-1_0-gstglwayland-1_0Upgrade libgstinsertbin-1_0-0-32bitUpgrade libgstegl-1_0-0Upgrade libgstwayland-1_0-0Upgrade libgsttag-1_0-0-32bitUpgrade libgstinsertbin-1_0-0-64bitUpgrade gstreamer-plugins-good-extra-32bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstplayer-1_0-0-64bitUpgrade libgstmpegts-1_0-0Upgrade gstreamer-plugins-base-docUpgrade typelib-1_0-gsttag-1_0Upgrade libgstfft-1_0-0-32bitUpgrade gstreamer-plugins-bad-develUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade gstreamer-plugins-bad-langUpgrade gstreamer-docUpgrade libgstphotography-1_0-0-64bitUpgrade gstreamer-plugins-good-jack-32bit | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub