CVE-2021-3185 | BDVDB-2026-148136 Detail

gstreamer

Description#

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1917192
https://security.gentoo.org/glsa/202208-31

Exploit#

No public exploit known

History#

Version 12021-01-25Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.