Security Advisory 2023-0010 (ZDI-CAN-22299, CVE-2023-44446)
DetailsUse-after-free (read) in the MXF demuxer when handling certain files before GStreamer 1.22.7 ImpactIt is possible for a malicious third party to trigger a crash in the application. SolutionThe gst-plugins-bad 1.22.7 releases address the issue. People using older branches of GStreamer should apply the patch and recompile. ReferencesThe GStreamer projectCVE Database EntriesGStreamer 1.22.7 releasePatches |
Report a problem on this page. |