GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gst-plugins-baseUpgrade gstreamer | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer-plugins-baseUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-corretto-headlessUpgrade java-11-amazon-correttoUpgrade gstreamer1-plugins-base-develUpgrade gstreamer-plugins-base-toolsUpgrade gstreamer-plugins-base-debuginfoUpgrade java-11-amazon-corretto-javadocUpgrade gstreamer-plugins-base-develUpgrade java-1.8.0-amazon-corretto-develUpgrade gstreamer-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-devel-docs | Nov 5, 2021 | Jun 2, 2021 |
| Azul Zulu | — | Apply Azul Zulu JDK 15 installer 15.35 (JDK 15.0.4.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.51 (JDK 11.0.12.0.101+2, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.57 (JDK 8u311-b02, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.30 (JDK 17.0.1+12, PSU) (LTS stream)Apply Azul Zulu JDK 13 installer 13.43 (JDK 13.0.8.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS) | Nov 30, 2021 | Jun 2, 2021 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 30, 2021 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gstreamer.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gst-plugins-good. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-base | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | Oct 26, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-base | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-base | Nov 2, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gstreamer1-plugins-base-helpUpgrade gstreamer1-plugins-base | Nov 12, 2021 | Jun 2, 2021 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 20, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.18.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jun 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2021 |
| Suse | — | Upgrade libgstinterfaces-0_10-0Upgrade libgstriff-1_0-0-32bitUpgrade libgstaudio-1_0-0Upgrade libgstrtp-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstinterfaces-0_10-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade libgstaudio-1_0-0-32bitUpgrade libgstrtsp-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-langUpgrade typelib-1_0-gstapp-1_0Upgrade libgstriff-1_0-0Upgrade libgsttag-1_0-0Upgrade libgstsdp-1_0-0-32bitUpgrade typelib-1_0-gstallocators-1_0Upgrade libgstrtp-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade gstreamer-plugins-base-devel-32bitUpgrade libgstsdp-1_0-0Upgrade libgstallocators-1_0-0Upgrade libgstgl-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstapp-1_0-0Upgrade gstreamer-plugins-base-docUpgrade gstreamer-plugins-baseUpgrade typelib-1_0-gstaudio-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-0_10-plugins-baseUpgrade libgstfft-1_0-0-32bitUpgrade libgstapp-0_10-0-32bitUpgrade gstreamer-plugins-base-langUpgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gstrtsp-1_0Upgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-develUpgrade typelib-1_0-gstpbutils-1_0Upgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-GstFft-1_0Upgrade gstreamer-plugins-base-32bitUpgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade typelib-1_0-gstvideo-1_0Upgrade libgstgl-1_0-0Upgrade libgstvideo-1_0-0Upgrade typelib-1_0-GstApp-0_10Upgrade libgstapp-0_10-0Upgrade typelib-1_0-gstsdp-1_0Upgrade typelib-1_0-gstrtp-1_0Upgrade libgstpbutils-1_0-0 | Nov 9, 2022 | Jun 2, 2021 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-base (Ubuntu Pro)Upgrade gstreamer1.0-plugins-base | May 19, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub