A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-base.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-bad. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade libgstinsertbin-1_0-0-64bitUpgrade gstreamer-plugins-bad-64bitUpgrade libgstvideo-1_0-0Upgrade gstreamer-docUpgrade gstreamer-plugins-good-extra-32bitUpgrade gstreamer-plugins-bad-develUpgrade gstreamer-plugins-baseUpgrade gstreamer-plugins-base-devel-32bitUpgrade gstreamer-plugins-bad-langUpgrade libgstmpegts-1_0-0Upgrade libgstwayland-1_0-0Upgrade libgsttag-1_0-0-32bitUpgrade gstreamer-plugins-bad-docUpgrade libgstsdp-1_0-0-32bitUpgrade libgstadaptivedemux-1_0-0Upgrade gstreamer-plugins-ugly-langUpgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade libgsturidownloader-1_0-0-32bitUpgrade libgstgl-1_0-0Upgrade libgstvulkan-1_0-0Upgrade libgstplayer-1_0-0-64bitUpgrade libgstapp-1_0-0Upgrade typelib-1_0-gstbadallocators-1_0Upgrade typelib-1_0-gstglwayland-1_0Upgrade gstreamer-plugins-uglyUpgrade libgstbadaudio-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade gstreamer-utilsUpgrade libgstmpegts-1_0-0-64bitUpgrade gstreamer-plugins-base-docUpgrade libgstcodecs-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade libgstva-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstbadaudio-1_0-0-64bitUpgrade libgstriff-1_0-0-32bitUpgrade gstreamer-plugins-good-jackUpgrade gstreamer-plugins-base-32bitUpgrade gstreamer-plugins-bad-32bitUpgrade gstreamer-plugins-good-docUpgrade gstreamer-plugins-good-jack-32bitUpgrade gstreamer-plugins-base-langUpgrade gstreamerUpgrade gstreamer-plugins-goodUpgrade libgstcodecparsers-1_0-0Upgrade gstreamer-32bitUpgrade libgstplay-1_0-0Upgrade gstreamer-plugins-ugly-docUpgrade libgstriff-1_0-0Upgrade typelib-1_0-gstcodecs-1_0Upgrade libgstplayer-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade gstreamer-plugins-badUpgrade gstreamer-plugins-base-develUpgrade gstreamer-plugins-bad-fluidsynthUpgrade libgstreamer-1_0-0-32bitUpgrade typelib-1_0-gstinsertbin-1_0Upgrade libgstbadallocators-1_0-0Upgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstpbutils-1_0-0Upgrade gstreamer-plugins-good-langUpgrade gstreamer-plugins-ugly-32bitUpgrade libgsttag-1_0-0Upgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade libgstphotography-1_0-0Upgrade libgstphotography-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstreamer-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstfft-1_0-0Upgrade libgstwebrtc-1_0-0Upgrade libgstisoff-1_0-0-32bitUpgrade libgstbadaudio-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgstwebrtc-1_0-0-32bitUpgrade typelib-1_0-gstglx11-1_0Upgrade libgstsctp-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-plugins-good-extraUpgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade libgstinsertbin-1_0-0Upgrade libgstsctp-1_0-0-64bitUpgrade libgstbadbase-1_0-0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-gstmpegts-1_0Upgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-plugins-good-gtkUpgrade gstreamer-langUpgrade typelib-1_0-gstapp-1_0Upgrade gstreamer-plugins-good-qtqmlUpgrade libgstwayland-1_0-0-32bitUpgrade libgstwayland-1_0-0-64bitUpgrade libgstplayer-1_0-0-32bitUpgrade gstreamer-plugins-bad-chromaprintUpgrade libgstbadvideo-1_0-0Upgrade libgstmpegts-1_0-0-32bitUpgrade libgstsctp-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade libgstadaptivedemux-1_0-0-32bitUpgrade typelib-1_0-gstwebrtc-1_0Upgrade libgstwebrtc-1_0-0-64bitUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstrtp-1_0-0-32bitUpgrade libgstcodecparsers-1_0-0-32bitUpgrade libgstisoff-1_0-0Upgrade gstreamer-develUpgrade libgstisoff-1_0-0-64bitUpgrade typelib-1_0-gstsdp-1_0Upgrade libgstrtsp-1_0-0-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstfft-1_0-0-32bitUpgrade libgstallocators-1_0-0Upgrade libgstegl-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade libgstrtsp-1_0-0Upgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade typelib-1_0-gst-1_0Upgrade typelib-1_0-gstglegl-1_0Upgrade typelib-1_0-gstgl-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade libgsturidownloader-1_0-0-64bit | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub