PT-2026-23764 · Gstreamer+3 · Gstreamer+3
Utkarsh Gupta
·
Publicado
2026-01-01
·
Atualizado
2026-06-10
·
CVE-2026-2921
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GStreamer (affected versions not specified)
Description
This issue is a remote code execution flaw stemming from an integer overflow within the handling of RIFF palette data in AVI files. The problem arises from insufficient validation of user-supplied data, leading to a potential integer overflow before memory write operations. An attacker could exploit this to execute code within the current process context. Interaction with the GStreamer library is required for exploitation, and attack vectors may vary based on implementation.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gstreamer
Linuxmint
Rocky Linux
Ubuntu