CVE-2021-3185

Critical

Description

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.

SeverityCritical

CVSS9.8

Exploit probability—

ProductFreedesktop Gst-plugins-bad

PublishedJan 26, 2021

First seenJan 26, 2021

Weakness typeCWE-120CWE-120

How to fix

Update

freedesktop gst-plugins-bad1.18.1 or later

Vendor advisories

security.gentoo.org/glsa/202208-31

Affected products

Product	Affected versions	Fixed in
freedesktop gst-plugins-bad	v < 1.18.1	1.18.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.