Gstreamer
CVE-2021-3497
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
AnalysisAI
A use-after-free vulnerability exists in GStreamer's Matroska demuxer that can be triggered when processing malformed video files, potentially allowing attackers to execute arbitrary code or cause application crashes. The vulnerability affects GStreamer versions before 1.18.4 and requires local access with user interaction to exploit. With an EPSS score of only 0.18% and no KEV listing, this vulnerability has low real-world exploitation probability despite its high CVSS score of 7.8.
Technical ContextAI
GStreamer is a widely-used multimedia framework that provides libraries for handling audio and video streams across Linux and other platforms. The vulnerability occurs in the Matroska (MKV) file format demuxer component, where error handling code paths can access memory that has already been freed (CWE-416: Use After Free). This class of vulnerability occurs when a program continues to use a pointer after the memory it references has been deallocated, leading to unpredictable behavior including potential code execution. The affected CPE entries indicate this impacts GStreamer on Debian Linux 9.0 and 10.0, as well as Red Hat Enterprise Linux 7.0 and 8.0.
RemediationAI
Upgrade GStreamer to version 1.18.4 or later, which contains the fix for this vulnerability. Patches are available from the vendor as noted in the Red Hat Bugzilla report at https://bugzilla.redhat.com/show_bug.cgi?id=1945339. For Debian users, apply the security updates referenced in DSA-4900 at https://www.debian.org/security/2021/dsa-4900. As a temporary mitigation until patching is complete, avoid processing untrusted or potentially malicious Matroska (MKV) files, and consider implementing sandboxing for media processing applications to limit the impact of potential exploitation.
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write an
A heap-based buffer overflow vulnerability exists in GStreamer's RTSP connection parser that allows remote attackers to
An integer overflow vulnerability in the GStreamer multimedia framework's matroska demuxer allows heap memory corruption
A critical integer overflow vulnerability in GStreamer's qtdemux element allows attackers to trigger denial of service o
A critical integer overflow vulnerability in the GStreamer multimedia framework's Matroska (MKV) demuxer can cause denia
An integer overflow vulnerability in GStreamer's Matroska demuxer can cause denial of service or potentially heap memory
An integer overflow vulnerability in GStreamer's AVI demux element allows attackers to trigger a heap overwrite when par
A heap overflow vulnerability exists in GStreamer's matroskaparse element due to an integer overflow in the gst_matroska
An integer overflow vulnerability in GStreamer's matroska demuxer can cause denial of service through segmentation fault
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today