A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade libgstallocators-1_0-0Upgrade libgsturidownloader-1_0-0-64bitUpgrade libgstsdp-1_0-0Upgrade gstreamerUpgrade libgstegl-1_0-0Upgrade libgstisoff-1_0-0-64bitUpgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade gstreamer-plugins-good-jack-32bitUpgrade libgstcodecparsers-1_0-0-64bitUpgrade libgstadaptivedemux-1_0-0Upgrade typelib-1_0-gstbadaudio-1_0Upgrade gstreamer-plugins-uglyUpgrade gstreamer-plugins-good-docUpgrade libgsturidownloader-1_0-0Upgrade gstreamer-plugins-bad-develUpgrade libgstapp-1_0-0Upgrade libgstinsertbin-1_0-0-32bitUpgrade typelib-1_0-gsttag-1_0Upgrade gstreamer-plugins-good-32bitUpgrade typelib-1_0-gstpbutils-1_0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade libgstvulkan-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade libgstfft-1_0-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade typelib-1_0-gstaudio-1_0Upgrade typelib-1_0-gstglwayland-1_0Upgrade gstreamer-plugins-bad-chromaprint-32bitUpgrade typelib-1_0-gstplay-1_0Upgrade libgstinsertbin-1_0-0-64bitUpgrade gstreamer-plugins-bad-64bitUpgrade gstreamer-plugins-baseUpgrade gstreamer-plugins-base-devel-32bitUpgrade typelib-1_0-gstglegl-1_0Upgrade libgstsdp-1_0-0-32bitUpgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gst-1_0Upgrade libgstvideo-1_0-0Upgrade gstreamer-plugins-good-extra-32bitUpgrade gstreamer-plugins-bad-langUpgrade libgstwayland-1_0-0Upgrade libgstphotography-1_0-0-64bitUpgrade libgstgl-1_0-0Upgrade libgstplayer-1_0-0-64bitUpgrade gstreamer-plugins-bad-docUpgrade gstreamer-docUpgrade libgstmpegts-1_0-0Upgrade libgsturidownloader-1_0-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-ugly-langUpgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade libgstbadaudio-1_0-0-64bitUpgrade libgstcodecs-1_0-0Upgrade libgstmpegts-1_0-0-64bitUpgrade libgstva-1_0-0Upgrade typelib-1_0-gstbadallocators-1_0Upgrade gstreamer-plugins-bad-32bitUpgrade gstreamer-plugins-base-docUpgrade gstreamer-utilsUpgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstbadaudio-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstrtsp-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade gstreamer-develUpgrade libgstwebrtc-1_0-0Upgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-badUpgrade libgstbadaudio-1_0-0-32bitUpgrade libgstwebrtc-1_0-0-32bitUpgrade gstreamer-plugins-bad-fluidsynthUpgrade typelib-1_0-gstplayer-1_0Upgrade gstreamer-plugins-base-develUpgrade libgstbadallocators-1_0-0Upgrade libgstplay-1_0-0Upgrade libgstallocators-1_0-0-32bitUpgrade gstreamer-plugins-good-extraUpgrade libgstinsertbin-1_0-0Upgrade libgstcodecparsers-1_0-0Upgrade libgstsctp-1_0-0-64bitUpgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstphotography-1_0-0-32bitUpgrade libgstbadbase-1_0-0Upgrade typelib-1_0-gstapp-1_0Upgrade gstreamer-plugins-ugly-docUpgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade typelib-1_0-gstallocators-1_0Upgrade libgstphotography-1_0-0Upgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstbadvideo-1_0-0Upgrade typelib-1_0-gstglx11-1_0Upgrade libgstisoff-1_0-0Upgrade gstreamer-plugins-good-qtqmlUpgrade libgstwayland-1_0-0-64bitUpgrade gstreamer-plugins-base-32bitUpgrade libgstplayer-1_0-0-32bitUpgrade libgstadaptivedemux-1_0-0-32bitUpgrade typelib-1_0-gstinsertbin-1_0Upgrade libgstisoff-1_0-0-32bitUpgrade gstreamer-plugins-ugly-32bitUpgrade libgstfft-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstsctp-1_0-0-32bitUpgrade libgstreamer-1_0-0-32bitUpgrade libgsttag-1_0-0Upgrade libgstwebrtc-1_0-0-64bitUpgrade gstreamer-plugins-goodUpgrade typelib-1_0-gstsdp-1_0Upgrade libgstplayer-1_0-0Upgrade libgstriff-1_0-0Upgrade gstreamer-plugins-good-jackUpgrade libgstrtp-1_0-0-32bitUpgrade libgstriff-1_0-0-32bitUpgrade libgstsctp-1_0-0Upgrade libgstwayland-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgstpbutils-1_0-0Upgrade libgstcodecparsers-1_0-0-32bitUpgrade typelib-1_0-gstcodecs-1_0Upgrade gstreamer-langUpgrade libgstmpegts-1_0-0-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade libgstreamer-1_0-0Upgrade typelib-1_0-gstmpegts-1_0Upgrade gstreamer-plugins-good-gtkUpgrade gstreamer-plugins-bad-chromaprintUpgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade typelib-1_0-gstwebrtc-1_0 | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub