GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gstwavparseadtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
{ "binaries": [ { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.8.3-1ubuntu0.5+esm1" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.8.3-1ubuntu0.5+esm1" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.8.3-1ubuntu0.5+esm1" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.8.3-1ubuntu0.5+esm1" } ] }
{ "binaries": [ { "binary_name": "gstreamer0.10-gconf", "binary_version": "0.10.31-3+nmu4ubuntu2.16.04.3" }, { "binary_name": "gstreamer0.10-plugins-good", "binary_version": "0.10.31-3+nmu4ubuntu2.16.04.3" }, { "binary_name": "gstreamer0.10-pulseaudio", "binary_version": "0.10.31-3+nmu4ubuntu2.16.04.3" } ] }
{ "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.14.5-0ubuntu1~18.04.3" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.14.5-0ubuntu1~18.04.3" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.14.5-0ubuntu1~18.04.3" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.14.5-0ubuntu1~18.04.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.14.5-0ubuntu1~18.04.3" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.14.5-0ubuntu1~18.04.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.16.3-0ubuntu1.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.20.3-0ubuntu1.3" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt6", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.24.2-1ubuntu1.1" } ] }