CRITICAL🇵🇱 Wersja polska

CVE-2021-3185

CVSS 9.8v3.1pub. 2021-01-26upd. 2024-11-21

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Freedesktop Gst Plugins Bad

    APP
    Freedesktop
    < 1.18.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2019-20367CRITICAL9.1PL ✓same vendor

Odczyt poza zakresem bufora w libbsd przed wersją 0.10.0

CVE-2019-9631CRITICAL9.8PL ✓same vendor

Heap-based buffer over-read w bibliotece Poppler 0.74.0

CVE-2016-2090CRITICAL9.8PL ✓same vendor

Heap-based buffer overflow w funkcji fgetwln biblioteki libbsd

CVE-2021-30860HIGH7.8⚠ KEVsame vendor

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-...

CVE-2026-50292HIGH7.4same vendor

In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject ude...