OSV-2023-862

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gstreamer/OSV-2023-862.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-862
Published
2023-09-16T14:01:07.280790Z
Modified
2025-01-10T05:49:31.753574Z
Summary
Heap-use-after-free in g_datalist_get_flags
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62381

Crash type: Heap-use-after-free READ 8
Crash state:
g_datalist_get_flags
g_object_unref
gst_object_unref
References

Affected packages

OSS-Fuzz / gstreamer

Package

Name
gstreamer
Purl
pkg:generic/gstreamer

Affected ranges

Type
GIT
Repo
https://gitlab.freedesktop.org/gstreamer/gstreamer.git
Events
Introduced
5fd3c8a16c9035d7ce334e2f1514cbc8f580b4e6
Fixed
4c19c9243aed70e9758e3a434e8764df8ae52676

Affected versions

1.*
1.23.1
1.23.2
1.23.90
1.24.0
1.24.1
1.24.10
1.24.11
1.24.2
1.24.3
1.24.4
1.24.5
1.24.6
1.24.7
1.24.8
1.24.9

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"b3245eb7bdca120ec56586c9d4d9f0efc16b23d3:4c19c9243aed70e9758e3a434e8764df8ae52676"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gstreamer/OSV-2023-862.yaml"