VDB

GCVE-110-MAGEIA-2021-187

GCVE-110-MAGEIA-2021-187
Advisory Published
Vulnetix · Advisory published April 15, 2021
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files (SA-2021-0002). GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files (SA-2021-0003). GStreamer before 1.18.4 might do an out-of-bounds read when handling certain RealMedia files or streams (SA-2021-0004). GStreamer before 1.18.4 might cause stack corruptions with streams that have more than 64 audio channels (SA-2021-0005). It might be possible for a malicious third party to trigger a crash in the application, but possibly also an arbitrary code execution with the privileges of the target user.

Affected Products

VendorProductVersionsPlatforms
Mageiagstreamer1.0-plugins-ugly0 (affected), 1.16.0-1.1.mga7 (unaffected), 1.16.0-1.1.mga7.tainted (unaffected)—
Mageiagstreamer1.0-libav0 (affected), 1.18.3-1.1.mga8 (unaffected)—
Mageiagstreamer1.0-libav0 (affected), 1.16.0-1.1.mga7 (unaffected)—
Mageiagstreamer1.0-plugins-ugly0 (affected), 1.18.3-1.1.mga8 (unaffected), 1.18.3-1.1.mga8.tainted (unaffected)—
Mageiagstreamer1.0-plugins-good0 (affected), 1.18.3-1.2.mga8 (unaffected)—
Mageiagstreamer1.0-plugins-good0 (affected), 1.16.0-1.1.mga7 (unaffected)—

Browse GCVE Records

20,323 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›