GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-baseUpgrade gstreamer | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-corretto-headlessUpgrade gstreamer-plugins-baseUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-base-toolsUpgrade java-1.8.0-amazon-correttoUpgrade gstreamer-plugins-base-toolsUpgrade gstreamer-plugins-base-devel-docsUpgrade java-11-amazon-corretto-javadocUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade java-11-amazon-correttoUpgrade gstreamer-plugins-base-develUpgrade java-1.8.0-amazon-corretto-develUpgrade gstreamer-plugins-base-debuginfo | Nov 5, 2021 | Jun 2, 2021 |
| Azul Zulu | — | Apply Azul Zulu JDK 13 installer 13.43 (JDK 13.0.8.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 17 installer 17.30 (JDK 17.0.1+12, PSU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.57 (JDK 8u311-b02, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 15 installer 15.35 (JDK 15.0.4.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.51 (JDK 11.0.12.0.101+2, quarterly CPU) (LTS stream) | Nov 30, 2021 | Jun 2, 2021 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 30, 2021 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-good.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gstreamer. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-base | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | Oct 26, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-base | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-base | Nov 2, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gstreamer1-plugins-base-helpUpgrade gstreamer1-plugins-base | Nov 12, 2021 | Jun 2, 2021 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 20, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.18.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jun 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2021 |
| Suse | — | Upgrade typelib-1_0-gstrtp-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstapp-0_10-0-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgstfft-1_0-0-32bitUpgrade libgstvideo-1_0-0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstrtsp-1_0-0Upgrade gstreamer-plugins-base-32bitUpgrade typelib-1_0-GstApp-0_10Upgrade gstreamer-plugins-base-develUpgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-plugins-base-langUpgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gstpbutils-1_0Upgrade gstreamer-0_10-plugins-base-develUpgrade libgstvideo-1_0-0-32bitUpgrade libgstallocators-1_0-0-32bitUpgrade libgstapp-0_10-0Upgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-0_10-plugins-baseUpgrade typelib-1_0-GstFft-1_0Upgrade libgstgl-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-langUpgrade libgstinterfaces-0_10-0-32bitUpgrade libgstrtp-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade typelib-1_0-gstaudio-1_0Upgrade libgstallocators-1_0-0Upgrade libgstpbutils-1_0-0-32bitUpgrade gstreamer-plugins-baseUpgrade typelib-1_0-gstallocators-1_0Upgrade libgstriff-1_0-0Upgrade libgstfft-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgstsdp-1_0-0Upgrade libgstsdp-1_0-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade gstreamer-plugins-base-docUpgrade libgstrtp-1_0-0-32bitUpgrade libgstriff-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-32bitUpgrade libgsttag-1_0-0Upgrade gstreamer-plugins-base-devel-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade libgstapp-1_0-0-32bitUpgrade libgstrtsp-1_0-0-32bit | Nov 9, 2022 | Jun 2, 2021 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-base (Ubuntu Pro)Upgrade gstreamer1.0-plugins-base | May 19, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub