CVE-2009-1932

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3)...

6.8 MediumFix available

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.

Exploit likelihood

5.47%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2009-1932
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-1932
Updated: 2026-11-02

EUVDEUVD-2009-1927 No score

Record: EUVD-2009-1927
Updated: 2026-11-03

GitHub AdvisoriesGHSA-69p6-gr8g-6vhp No score

Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3)...

Record: GHSA-69p6-gr8g-6vhp
Updated: 2026-11-02

Affected products

gstreamer good plug-ins

Affected packages

Affected packages
Package	Affected	Fixed
`gst-plugins-good0.10` Debian:4.0	before 0.10.4-4+etch1, plus listed versions 0.10.4-4	0.10.4-4+etch1
`gst-plugins-good0.10` Debian:5.0	before 0.10.8-4.1~lenny2, plus listed versions 0.10.8-4.1~lenny1	0.10.8-4.1~lenny2
`gstreamer-plugins-good` Red Hat:enterprise_linux:5::client_workstation	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good` Red Hat:enterprise_linux:5::client	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good-debuginfo` Red Hat:enterprise_linux:5::client	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good` Red Hat:enterprise_linux:5::server	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good-debuginfo` Red Hat:enterprise_linux:5::server	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2
`gstreamer-plugins-good-devel` Red Hat:enterprise_linux:5::server	before 0:0.10.9-1.el5_3.2	0:0.10.9-1.el5_3.2

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-1932 is a medium vulnerability (CVSS 6.8) in Gstreamer Good Plug-ins, published June 4, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.47%, the 92nd percentile. Fixed in gst-plugins-good0.10 0.10.4-4+etch1.

References

Show 15 moreShow less