GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-baseUpgrade gstreamer | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer-plugins-baseUpgrade java-11-amazon-corretto-headlessUpgrade gstreamer1-plugins-base-debuginfoUpgrade java-1.8.0-amazon-correttoUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-base-devel-docsUpgrade java-11-amazon-correttoUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer-plugins-base-develUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-base-toolsUpgrade java-1.8.0-amazon-corretto-develUpgrade java-11-amazon-corretto-javadocUpgrade gstreamer-plugins-base-debuginfo | Nov 5, 2021 | Jun 2, 2021 |
| Azul Zulu | — | Apply Azul Zulu JDK 13 installer 13.43 (JDK 13.0.8.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 17 installer 17.30 (JDK 17.0.1+12, PSU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.57 (JDK 8u311-b02, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 15 installer 15.35 (JDK 15.0.4.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.51 (JDK 11.0.12.0.101+2, quarterly CPU) (LTS stream) | Nov 30, 2021 | Jun 2, 2021 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 30, 2021 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gstreamer. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-base | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | Oct 26, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-base | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-base | Nov 2, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gstreamer1-plugins-base-helpUpgrade gstreamer1-plugins-base | Nov 12, 2021 | Jun 2, 2021 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 20, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.18.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jun 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2021 |
| Suse | — | Upgrade libgstsdp-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade gstreamer-plugins-base-devel-32bitUpgrade libgstaudio-1_0-0-32bitUpgrade libgstinterfaces-0_10-0-32bitUpgrade gstreamer-plugins-baseUpgrade libgstallocators-1_0-0Upgrade typelib-1_0-gstallocators-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstrtp-1_0-0Upgrade gstreamer-plugins-base-docUpgrade libgstsdp-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstriff-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstrtp-1_0-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade gstreamer-0_10-plugins-base-langUpgrade libgsttag-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade libgstriff-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstvideo-1_0-0-32bitUpgrade typelib-1_0-gstgl-1_0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstpbutils-1_0Upgrade libgstapp-0_10-0Upgrade libgstrtsp-1_0-0Upgrade libgstfft-1_0-0-32bitUpgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-gstrtp-1_0Upgrade libgstvideo-1_0-0Upgrade gstreamer-plugins-base-develUpgrade libgstapp-0_10-0-32bitUpgrade gstreamer-plugins-base-langUpgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-0_10-plugins-baseUpgrade typelib-1_0-gstrtsp-1_0Upgrade typelib-1_0-gstvideo-1_0Upgrade gstreamer-plugins-base-32bitUpgrade gstreamer-0_10-plugins-base-develUpgrade typelib-1_0-GstApp-0_10Upgrade typelib-1_0-gstsdp-1_0Upgrade libgstpbutils-1_0-0Upgrade libgstgl-1_0-0 | Nov 9, 2022 | Jun 2, 2021 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-base (Ubuntu Pro)Upgrade gstreamer1.0-plugins-base | May 19, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub