GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gstreamerUpgrade gst-plugins-base | Mar 26, 2024 | Jun 2, 2021 |
| Amazon Linux Ami 2 | — | Upgrade gstreamer-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-develUpgrade java-1.8.0-amazon-corretto-develUpgrade gstreamer-plugins-base-debuginfoUpgrade java-11-amazon-corretto-javadocUpgrade gstreamer-plugins-base-develUpgrade java-11-amazon-correttoUpgrade gstreamer-plugins-base-toolsUpgrade gstreamer1-plugins-base-devel-docsUpgrade gstreamer1-plugins-base-toolsUpgrade gstreamer1-plugins-base-debuginfoUpgrade gstreamer1-plugins-baseUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-corretto-headlessUpgrade gstreamer-plugins-base | Nov 5, 2021 | Jun 2, 2021 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.57 (JDK 8u311-b02, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 15 installer 15.35 (JDK 15.0.4.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 11 installer 11.51 (JDK 11.0.12.0.101+2, quarterly CPU) (LTS stream)Apply Azul Zulu JDK 13 installer 13.43 (JDK 13.0.8.0.101+1, quarterly CPU) (short-term support); migrate to JDK 17 (LTS)Upgrade to Azul Zulu JDK 17 installer 17.30 (JDK 17.0.1+12, PSU) (LTS stream) | Nov 30, 2021 | Jun 2, 2021 |
| Debian | — | Upgrade gst-plugins-base1.0 | Apr 30, 2021 | Apr 30, 2021 |
| Gentoo Linux | — | Upgrade media-libs/gst-plugins-good.Upgrade media-libs/gst-plugins-ugly.Upgrade media-libs/gst-plugins-bad.Upgrade media-libs/gstreamer.Upgrade media-plugins/gst-plugins-libav.Upgrade media-libs/gst-plugins-base. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gstreamer-plugins-base | Sep 16, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gstreamer-plugins-base | Oct 26, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gstreamer-plugins-base | Sep 29, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gstreamer-plugins-base | Nov 2, 2021 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade gstreamer1-plugins-baseUpgrade gstreamer1-plugins-base-help | Nov 12, 2021 | Jun 2, 2021 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Oct 20, 2021 | Jun 2, 2021 |
| Oracle Solaris | — | Upgrade library/desktop/gstreamer-1 to version 1.18.4-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Jun 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2021 |
| Suse | — | Upgrade libgstrtp-1_0-0-32bitUpgrade gstreamer-0_10-plugins-base-32bitUpgrade libgstriff-1_0-0Upgrade libgstriff-1_0-0-32bitUpgrade libgstfft-1_0-0Upgrade libgstaudio-1_0-0-32bitUpgrade gstreamer-plugins-baseUpgrade libgstallocators-1_0-0Upgrade libgstapp-1_0-0Upgrade libgstrtp-1_0-0Upgrade libgstinterfaces-0_10-0-32bitUpgrade libgstinterfaces-0_10-0Upgrade typelib-1_0-gstaudio-1_0Upgrade typelib-1_0-gstallocators-1_0Upgrade gstreamer-plugins-base-devel-32bitUpgrade gstreamer-0_10-plugins-base-langUpgrade libgstaudio-1_0-0Upgrade libgstsdp-1_0-0-32bitUpgrade libgstgl-1_0-0-32bitUpgrade libgsttag-1_0-0Upgrade typelib-1_0-gsttag-1_0Upgrade libgstsdp-1_0-0Upgrade libgstrtsp-1_0-0-32bitUpgrade typelib-1_0-gstapp-1_0Upgrade libgstpbutils-1_0-0-32bitUpgrade libgstapp-1_0-0-32bitUpgrade gstreamer-plugins-base-docUpgrade libgstgl-1_0-0Upgrade libgstapp-0_10-0-32bitUpgrade typelib-1_0-gstrtp-1_0Upgrade typelib-1_0-gstsdp-1_0Upgrade libgstpbutils-1_0-0Upgrade gstreamer-plugins-base-develUpgrade typelib-1_0-gstpbutils-1_0Upgrade libgstvideo-1_0-0-32bitUpgrade gstreamer-0_10-plugins-baseUpgrade libgstallocators-1_0-0-32bitUpgrade typelib-1_0-GstApp-0_10Upgrade typelib-1_0-GstInterfaces-0_10Upgrade gstreamer-0_10-plugins-base-develUpgrade gstreamer-plugins-base-32bitUpgrade libgstfft-1_0-0-32bitUpgrade libgstapp-0_10-0Upgrade libgstvideo-1_0-0Upgrade libgstrtsp-1_0-0Upgrade typelib-1_0-gstgl-1_0Upgrade libgsttag-1_0-0-32bitUpgrade typelib-1_0-gstvideo-1_0Upgrade typelib-1_0-GstFft-1_0Upgrade typelib-1_0-gstrtsp-1_0Upgrade gstreamer-plugins-base-lang | Nov 9, 2022 | Jun 2, 2021 |
| Ubuntu | — | Upgrade gstreamer1.0-plugins-base (Ubuntu Pro)Upgrade gstreamer1.0-plugins-base | May 19, 2021 | May 18, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub