CVE-2021-3498

CVE	CVE-2021-3498
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-04-19 21:15:00 UTC
Updated	2022-10-24 15:08:00 UTC
Description	GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.

Problem Types: CWE-787

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Debian	Debian Linux	10.0	All	All	All
Application	Gstreamer Project	Gstreamer	All	All	All	All
Operating System	Redhat	Enterprise Linux	7.0	All	All	All
Operating System	Redhat	Enterprise Linux	8.0	All	All	All

Reference	Source	Link	Tags
GStreamer, GStreamer Plugins: Multiple Vulnerabilities (GLSA 202208-31) — Gentoo security	GENTOO	security.gentoo.org
Security Advisory 2021-0003	MISC	gstreamer.freedesktop.org
Gstreamer Matroska Demuxing Use-After-Free ≈ Packet Storm	MISC	packetstormsecurity.com
Debian -- Security Information -- DSA-4900-1 gst-plugins-good1.0	DEBIAN	www.debian.org
1945342 – (CVE-2021-3498) CVE-2021-3498 gstreamer-plugins-good: Heap corruption in matroska demuxing	MISC	bugzilla.redhat.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

178564 Debian Security Update for gst-plugins-good1.0 (DSA 4900-1)
180489 Debian Security Update for gst-plugins-good1.0 (CVE-2021-3498)
198347 Ubuntu Security Notification for GStreamer Good Plugins vulnerabilities (USN-4928-1)
296065 Oracle Solaris 11.4 Support Repository Update (SRU) 39.107.1 Missing (CPUOCT2021)
501418 Alpine Linux Security Update for gstreamer
501579 Alpine Linux Security Update for gst-plugins-good
503987 Alpine Linux Security Update for gstreamer
710603 Gentoo Linux GStreamer, GStreamer Plugins Multiple Vulnerabilities (GLSA 202208-31)
751090 OpenSUSE Security Update for gstreamer-plugins-good (openSUSE-SU-2021:1230-1)
751101 OpenSUSE Security Update for gstreamer-plugins-good (openSUSE-SU-2021:2915-1)