GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpairsize. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good-dbg", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good-doc", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.16.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.16.3-0ubuntu1.3" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-gtk3-dbgsym", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-plugins-good-dbgsym", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "gstreamer1.0-qt5-dbgsym", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-0-dbgsym", "binary_version": "1.20.3-0ubuntu1.3" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.20.3-0ubuntu1.3" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-gtk3-dbgsym", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-good-dbgsym", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt5-dbgsym", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt6", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt6-dbgsym", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-0-dbgsym", "binary_version": "1.24.8-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.24.8-1ubuntu1.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-gtk3-dbgsym", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-plugins-good-dbgsym", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt5-dbgsym", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt6", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "gstreamer1.0-qt6-dbgsym", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-0-dbgsym", "binary_version": "1.24.2-1ubuntu1.1" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.24.2-1ubuntu1.1" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "gstreamer1.0-gtk3", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-gtk3-dbgsym", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-plugins-good", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-plugins-good-dbgsym", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-pulseaudio", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-qt5", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-qt5-dbgsym", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-qt6", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "gstreamer1.0-qt6-dbgsym", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "libgstreamer-plugins-good1.0-0", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "libgstreamer-plugins-good1.0-0-dbgsym", "binary_version": "1.24.10-1ubuntu1" }, { "binary_name": "libgstreamer-plugins-good1.0-dev", "binary_version": "1.24.10-1ubuntu1" } ] }