← Volver a CVEs
CVE-2022-1925
HIGH7.8
Descripcion
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
Detalles CVE
Puntuacion CVSS v3.17.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado7/19/2022
Ultima modificacion3/17/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
debian:debian_linuxgstreamer:gstreamer
Debilidades (CWE)
CWE-122CWE-190
Referencias
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225(secalert@redhat.com)
https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html(secalert@redhat.com)
https://www.debian.org/security/2022/dsa-5204(secalert@redhat.com)
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225(af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2022/dsa-5204(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.