OSV-2022-1168

Import Source

JSON Data

https://api.osv.dev/v1/vulns/OSV-2022-1168

Published

2022-11-12T13:00:43Z

Modified

2023-06-22T14:16:08Z

Summary

Heap-buffer-overflow in parse_subrip

Details

Crash type: Heap-buffer-overflow WRITE {*}
Crash state:
parse_subrip
parse_webvtt
gst_sub_parse_chain

References

Affected packages

Type: GIT
Repo: https://gitlab.freedesktop.org/gstreamer/gstreamer.git
Events: Introduced

86f0f8b67f54ddae25af2a8ed1a64cb5d57fc2fe

Introduced

e9e4ac0ba99df5240b2905c694e1c095055fb65a

Fixed

97c6d7495e6edb009789cf43ea79e26c54f88538

Fixed

7632b0c2a004f28d6309a884c14b943278db8166

Fixed

518ecba8f960137715f776dac6c93e4c4e4179d1

1.*

1.20.2

1.20.3

1.20.4

1.20.5

1.20.6

1.21.1

1.21.2

1.21.3

1.21.90

1.22.0

1.22.1

1.22.2

1.22.3

{
    "severity": "HIGH"
}

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gstreamer/OSV-2022-1168.yaml"