PT-2026-37814 · Bitnami · Java
Published
2026-05-06
·
Updated
2026-05-06
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux parse svq3 stsd data function within qtdemux.c. In the FOURCC SMI case, seqh size is read from the input file without proper validation. If seqh size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst buffer fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Java