A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-ugly.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | — | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade libgstcodecparsers-1_0-0Upgrade typelib-1_0-gstsdp-1_0Upgrade gstreamer-32bitUpgrade libgstwebrtc-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-plugins-ugly-docUpgrade libgstrtp-1_0-0-32bitUpgrade libgstplayer-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade libgstriff-1_0-0Upgrade libgstwebrtc-1_0-0-32bitUpgrade libgstplay-1_0-0Upgrade libgsttag-1_0-0Upgrade typelib-1_0-gstcodecs-1_0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-good-gtkUpgrade libgstreamer-1_0-0-32bitUpgrade gstreamer-plugins-bad-chromaprintUpgrade libgstapp-1_0-0-32bitUpgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade gstreamer-plugins-base-32bitUpgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstcodecparsers-1_0-0-32bitUpgrade libgstpbutils-1_0-0Upgrade libgstbadvideo-1_0-0Upgrade gstreamer-plugins-good-qtqmlUpgrade libgstwayland-1_0-0-64bitUpgrade gstreamer-develUpgrade libgstadaptivedemux-1_0-0-32bitUpgrade libgstsctp-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade libgstmpegts-1_0-0-32bitUpgrade libgstwayland-1_0-0-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade libgstplayer-1_0-0-32bitUpgrade libgstreamer-1_0-0Upgrade libgstphotography-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstwebrtc-1_0-0-64bitUpgrade typelib-1_0-gstallocators-1_0Upgrade libgstbadallocators-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstphotography-1_0-0Upgrade typelib-1_0-gstglx11-1_0Upgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-ugly-32bitUpgrade libgstfft-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade typelib-1_0-gstwebrtc-1_0Upgrade libgstsctp-1_0-0-64bitUpgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade libgstinsertbin-1_0-0Upgrade libgstallocators-1_0-0-32bitUpgrade gstreamer-plugins-badUpgrade gstreamer-plugins-good-extraUpgrade libgstbadbase-1_0-0Upgrade libgstbadaudio-1_0-0-32bitUpgrade libgstisoff-1_0-0-32bitUpgrade gstreamer-plugins-bad-fluidsynthUpgrade gstreamer-plugins-goodUpgrade gstreamer-plugins-good-jackUpgrade libgstsctp-1_0-0Upgrade libgstisoff-1_0-0Upgrade typelib-1_0-gstplayer-1_0Upgrade gstreamer-plugins-base-develUpgrade libgstaudio-1_0-0Upgrade libgstrtp-1_0-0Upgrade gstreamer-langUpgrade libgstfft-1_0-0-32bitUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade gstreamer-plugins-bad-chromaprint-32bitUpgrade libgstbadaudio-1_0-0-64bitUpgrade libgstva-1_0-0Upgrade gstreamerUpgrade libgstvulkan-1_0-0Upgrade libgstapp-1_0-0Upgrade gstreamer-docUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-bad-develUpgrade libgstallocators-1_0-0Upgrade libgsturidownloader-1_0-0-64bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstsdp-1_0-0-32bitUpgrade libgstvideo-1_0-0Upgrade libgstmpegts-1_0-0Upgrade gstreamer-plugins-good-extra-32bitUpgrade gstreamer-plugins-bad-64bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstphotography-1_0-0-64bitUpgrade typelib-1_0-gstplay-1_0Upgrade libgstinsertbin-1_0-0-64bitUpgrade libgstsdp-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstglwayland-1_0Upgrade libgstgl-1_0-0-32bitUpgrade libgstegl-1_0-0Upgrade typelib-1_0-gstaudio-1_0Upgrade gstreamer-plugins-base-langUpgrade libgstadaptivedemux-1_0-0Upgrade gstreamer-plugins-good-jack-32bitUpgrade libgstrtsp-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade gstreamer-plugins-bad-docUpgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade typelib-1_0-gstbadallocators-1_0Upgrade gstreamer-plugins-uglyUpgrade typelib-1_0-gst-1_0Upgrade gstreamer-plugins-baseUpgrade libgstplayer-1_0-0-64bitUpgrade typelib-1_0-gstglegl-1_0Upgrade libgsturidownloader-1_0-0Upgrade libgsttag-1_0-0-32bitUpgrade libgstmpegts-1_0-0-64bitUpgrade gstreamer-plugins-bad-32bitUpgrade libgsturidownloader-1_0-0-32bitUpgrade libgstwayland-1_0-0Upgrade libgstcodecs-1_0-0Upgrade gstreamer-plugins-bad-langUpgrade libgstinsertbin-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade gstreamer-plugins-good-32bitUpgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade libgstbadaudio-1_0-0Upgrade gstreamer-utilsUpgrade gstreamer-plugins-ugly-langUpgrade gstreamer-plugins-base-docUpgrade typelib-1_0-gstbadaudio-1_0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade gstreamer-plugins-good-docUpgrade libgstisoff-1_0-0-64bitUpgrade typelib-1_0-gsttag-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstcodecparsers-1_0-0-64bit | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub