Gstreamer
CVE-2022-2122
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.
AnalysisAI
A critical integer overflow vulnerability in GStreamer's qtdemux element allows attackers to trigger denial of service or potentially execute arbitrary code through heap memory corruption. The vulnerability affects GStreamer versions prior to the patched releases and requires user interaction to process a malicious media file. A public proof-of-concept exploit is available, though the EPSS score indicates relatively low real-world exploitation probability at 0.06%.
Technical ContextAI
The vulnerability resides in the qtdemux_inflate function within GStreamer's QuickTime demultiplexer (qtdemux) element, which handles zlib decompression of media data. The issue is classified as CWE-122 (Heap-based Buffer Overflow), where an integer overflow during decompression calculations can lead to incorrect memory allocation sizes. GStreamer is a widely-used multimedia framework that processes various media formats, and the qtdemux element specifically handles QuickTime/MP4 container formats. The behavior varies depending on the underlying libc implementation and operating system capabilities, ranging from a simple segmentation fault to a potentially exploitable heap overwrite condition.
RemediationAI
Apply the security updates provided in Debian Security Advisory DSA-5204 (https://www.debian.org/security/2022/dsa-5204) for Debian 11, and the corresponding LTS announcement (https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html) for Debian 10. For other distributions, update GStreamer packages to versions that include the fix for issue #1225 as tracked at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225. As a temporary mitigation, restrict processing of untrusted media files and implement input validation for QuickTime/MP4 files where possible. Consider sandboxing applications that process media files to limit the impact of potential exploitation.
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write an
A heap-based buffer overflow vulnerability exists in GStreamer's RTSP connection parser that allows remote attackers to
An integer overflow vulnerability in the GStreamer multimedia framework's matroska demuxer allows heap memory corruption
A critical integer overflow vulnerability in the GStreamer multimedia framework's Matroska (MKV) demuxer can cause denia
An integer overflow vulnerability in GStreamer's Matroska demuxer can cause denial of service or potentially heap memory
An integer overflow vulnerability in GStreamer's AVI demux element allows attackers to trigger a heap overwrite when par
A heap overflow vulnerability exists in GStreamer's matroskaparse element due to an integer overflow in the gst_matroska
An integer overflow vulnerability in GStreamer's matroska demuxer can cause denial of service through segmentation fault
An out-of-bounds write vulnerability exists in GStreamer's SSA subtitle parser (gstssaparse.c) that occurs when malforme
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today