A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gst-plugins-bad1.0 | Jan 22, 2021 | Jan 22, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gstreamer.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-base.Upgrade media-plugins/gst-plugins-libav. | Aug 16, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-bad-free | May 25, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-bad-free | Mar 22, 2022 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-bad-free | Mar 29, 2022 | Jan 26, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 26, 2021 |
| Suse | — | Upgrade gstreamer-plugins-bad-fluidsynth-64bitUpgrade gstreamer-plugins-goodUpgrade libgstphotography-1_0-0Upgrade libgstinsertbin-1_0-0Upgrade gstreamer-plugins-good-extraUpgrade libgstallocators-1_0-0-32bitUpgrade gstreamer-plugins-bad-fluidsynth-32bitUpgrade libgstsctp-1_0-0-64bitUpgrade libgstbadbase-1_0-0Upgrade libgstisoff-1_0-0Upgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-gstglx11-1_0Upgrade libgstcodecparsers-1_0-0-32bitUpgrade libgstbadvideo-1_0-0Upgrade libgstplay-1_0-0Upgrade typelib-1_0-gstcodecs-1_0Upgrade typelib-1_0-gstapp-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstapp-1_0-0-32bitUpgrade libgstmpegts-1_0-0-32bitUpgrade libgstsctp-1_0-0-32bitUpgrade libgstrtp-1_0-0-32bitUpgrade libgstbadallocators-1_0-0Upgrade gstreamer-plugins-ugly-32bitUpgrade typelib-1_0-gstmpegts-1_0Upgrade libgstplayer-1_0-0-32bitUpgrade gstreamer-plugins-good-jackUpgrade libgstplayer-1_0-0Upgrade libgstriff-1_0-0Upgrade libgstvideo-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstreamer-1_0-0Upgrade libgstsctp-1_0-0Upgrade typelib-1_0-gstinsertbin-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade gstreamer-plugins-base-develUpgrade libgstbadaudio-1_0-0-32bitUpgrade libgstphotography-1_0-0-32bitUpgrade gstreamer-plugins-good-qtqmlUpgrade libgstwayland-1_0-0-64bitUpgrade libgstwayland-1_0-0-32bitUpgrade typelib-1_0-gstwebrtc-1_0Upgrade libgstisoff-1_0-0-32bitUpgrade libgstbasecamerabinsrc-1_0-0-64bitUpgrade libgstwebrtc-1_0-0Upgrade gstreamer-plugins-good-gtkUpgrade libgstwebrtc-1_0-0-32bitUpgrade libgsttag-1_0-0Upgrade gstreamer-plugins-bad-chromaprintUpgrade libgstriff-1_0-0-32bitUpgrade typelib-1_0-gstsdp-1_0Upgrade gstreamer-32bitUpgrade gstreamer-langUpgrade libgstrtsp-1_0-0-32bitUpgrade gstreamer-plugins-ugly-docUpgrade gstreamer-plugins-good-langUpgrade gstreamer-develUpgrade typelib-1_0-gstvideo-1_0Upgrade libgstaudio-1_0-0Upgrade libgstrtp-1_0-0Upgrade gstreamer-plugins-badUpgrade gstreamer-plugins-bad-fluidsynthUpgrade libgstcodecparsers-1_0-0Upgrade libgstadaptivedemux-1_0-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade libgstreamer-1_0-0-32bitUpgrade typelib-1_0-gstplayer-1_0Upgrade libgstwebrtc-1_0-0-64bitUpgrade libgstsdp-1_0-0-32bitUpgrade typelib-1_0-gstbadallocators-1_0Upgrade libgstwayland-1_0-0Upgrade libgstinsertbin-1_0-0-64bitUpgrade gstreamer-plugins-bad-64bitUpgrade libgstvulkan-1_0-0Upgrade gstreamer-plugins-good-docUpgrade gstreamer-plugins-base-langUpgrade libgstvideo-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade gstreamer-plugins-bad-develUpgrade gstreamerUpgrade gstreamer-plugins-bad-docUpgrade libgstgl-1_0-0Upgrade gstreamer-plugins-bad-langUpgrade libgstisoff-1_0-0-64bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstallocators-1_0-0Upgrade libgsturidownloader-1_0-0-64bitUpgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-bad-chromaprint-32bitUpgrade gstreamer-plugins-baseUpgrade libgstplayer-1_0-0-64bitUpgrade libgsturidownloader-1_0-0-32bitUpgrade gstreamer-docUpgrade typelib-1_0-gst-1_0Upgrade libgstfft-1_0-0-32bitUpgrade typelib-1_0-gstglegl-1_0Upgrade libgstbasecamerabinsrc-1_0-0Upgrade libgstinsertbin-1_0-0-32bitUpgrade gstreamer-plugins-base-docUpgrade libgstbasecamerabinsrc-1_0-0-32bitUpgrade libgstbadaudio-1_0-0Upgrade gstreamer-utilsUpgrade gstreamer-plugins-ugly-langUpgrade libgstapp-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade libgstegl-1_0-0Upgrade typelib-1_0-gstpbutils-1_0Upgrade libgstaudio-1_0-0-32bitUpgrade typelib-1_0-gstplay-1_0Upgrade typelib-1_0-gstglwayland-1_0Upgrade typelib-1_0-gstbadaudio-1_0Upgrade libgstsdp-1_0-0Upgrade gstreamer-plugins-uglyUpgrade libgstadaptivedemux-1_0-0-64bitUpgrade libgsttag-1_0-0-32bitUpgrade gstreamer-plugins-good-jack-32bitUpgrade gstreamer-plugins-good-extra-32bitUpgrade libgstphotography-1_0-0-64bitUpgrade libgstrtsp-1_0-0Upgrade libgstcodecparsers-1_0-0-64bitUpgrade gstreamer-plugins-base-devel-32bitUpgrade libgstmpegts-1_0-0Upgrade gstreamer-plugins-bad-chromaprint-64bitUpgrade libgstadaptivedemux-1_0-0Upgrade libgstcodecs-1_0-0Upgrade gstreamer-plugins-good-32bitUpgrade libgstbadaudio-1_0-0-64bitUpgrade gstreamer-plugins-bad-32bitUpgrade libgstva-1_0-0Upgrade libgsturidownloader-1_0-0Upgrade libgstmpegts-1_0-0-64bitUpgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-gstaudio-1_0 | Jun 2, 2021 | Jan 26, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub