CVE-2021-3522
CVE-2021-3522
This page contains facts from public vulnerability sources. Check the original advisory before updating.
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
CVSS 5.5 · Medium · EPSS 5.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
gstreamer
- Versions
- All GStreamer version before 1.18.4: Affected
No fix published
gst-plugins-base1.0 Debian:12
- Affected ranges
- ECOSYSTEM: < 1.18.4-2
Update to 1.18.4-2
gst-plugins-base1.0 Debian:13
- Affected ranges
- ECOSYSTEM: < 1.18.4-2
Update to 1.18.4-2
gst-plugins-base1.0 Debian:14
- Affected ranges
- ECOSYSTEM: < 1.18.4-2
Update to 1.18.4-2
gst-plugins-base1.0 Ubuntu:Pro:16.04:LTS
- Versions
- 1.6.0-1ubuntu1
- 1.6.1-1ubuntu1
- 1.6.2-1ubuntu1
- 1.7.1-1ubuntu1
- 1.7.2-1ubuntu1
- 1.7.90-1ubuntu1
- 1.7.91-1ubuntu1
- 1.8.0-1ubuntu1
- 1.8.1-1ubuntu0.1
- 1.8.2-1ubuntu0.1
- 1.8.2-1ubuntu0.2
- 1.8.3-1ubuntu0.1
- 1.8.3-1ubuntu0.2
- 1.8.3-1ubuntu0.3
- Affected ranges
- ECOSYSTEM: < 1.8.3-1ubuntu0.3+esm1
Update to 1.8.3-1ubuntu0.3+esm1
gst-plugins-base1.0 Ubuntu:18.04:LTS
- Versions
- 1.12.3-1
- 1.12.4-1
- 1.13.1-1ubuntu1
- 1.13.91-1ubuntu1
- 1.14.0-1ubuntu1
- 1.14.0-2ubuntu1
- 1.14.1-1ubuntu1~ubuntu18.04.1
- 1.14.1-1ubuntu1~ubuntu18.04.2
- 1.14.4-1ubuntu1.1~ubuntu18.04.1
- 1.14.5-0ubuntu1~18.04.1
- 1.14.5-0ubuntu1~18.04.2
- Affected ranges
- ECOSYSTEM: < 1.14.5-0ubuntu1~18.04.3
Update to 1.14.5-0ubuntu1~18.04.3
gst-plugins-base1.0 Ubuntu:20.04:LTS
- Versions
- 1.16.1-1
- 1.16.2-1
- 1.16.2-2
- 1.16.2-2ubuntu3
- 1.16.2-2ubuntu4
- 1.16.2-4
- Affected ranges
- ECOSYSTEM: < 1.16.2-4ubuntu0.1
Update to 1.16.2-4ubuntu0.1