Gentoo Project

GStreamer package maintainers

Security Bug Reports

• <media-libs/gst-plugins-base-1.22.12: Integer overflow in EXIF metadata parser leading to potential heap overwrite

  930973 - Assigned to Gentoo Security
• <media-libs/gst-plugins-base-1.24.13-r1: Integer overflow in RIFF parser

  970986 - Assigned to Gentoo Security
• <media-libs/gst-plugins-good-1.24.13-r1: multiple vulnerabilities

  970987 - Assigned to Gentoo Security
• <media-libs/gst-plugins-ugly-1.24.13-r1: multiple vulnerabilities

  970989 - Assigned to Gentoo Security
• <media-libs/gst-plugins-bad-1.24.13-r1: multiple vulnerabilities

  970993 - Assigned to Gentoo Security
• <media-libs/gst-plugins-bad-1.26.11: multiple vulnerabilities

  974284 - Assigned to GStreamer package maintainers
• <media-libs/gst-plugins-base-1.26.11: multiple vulnerabilities

  974285 - Assigned to GStreamer package maintainers
• <media-libs/gst-plugins-good-1.26.11: multiple vulnerabilities

  974286 - Assigned to GStreamer package maintainers
• media-libs/gstreamer: Use-after-free in GStreamer core buffer value deserialization

  974710 - Assigned to Gentoo Security
• media-libs/gst-plugins-good: Insufficient validation in MOV/MP4 demuxer uncompressed video handling

  974711 - Assigned to Gentoo Security
• media-libs/gst-plugins-bad: multiple vulnerabilities

  974712 - Assigned to Gentoo Security
• media-libs/gst-plugins-base: multiple vulnerabilities

  978657 - Assigned to Gentoo Security
• media-libs/gst-plugins-bad: multiple vulnerabilities

  978660 - Assigned to Gentoo Security
• media-plugins/gst-plugins-wavpack: Integer overflow in WavPack decoder

  978661 - Assigned to Gentoo Security
• media-libs/gst-plugins-good: Out-of-bounds read in SBC audio parser header parsing

  978662 - Assigned to Gentoo Security
• media-libs/gst-plugins-ugly: Out-of-bounds reads and integer overflows in RealMedia demuxer

  978663 - Assigned to Gentoo Security
• media-plugins/gst-plugins-libav: multiple vulnerabilities

  978668 - Assigned to Gentoo Security