CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2021-26838
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
EUVD-2021-26838- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x3cx-v22q-v4cr
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
GHSA-x3cx-v22q-v4cr- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
ALPINE-CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVDEBIAN-CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
DEBIAN-CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2021-1237
gstreamer-plugins-base security update
GStreamer is a pipeline-based multimedia framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. The formats and processes can be changed in plugins since its plugin-based architecture. This package contains a set of well-maintained base plug-ins and wrapper scripts for the command-line tools for the base plugins.
Security Fix(es):
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.(CVE-2021-3522)
- Record
OESA-2021-1237- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2022-1601
gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin.
Security Fix(es):
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.(CVE-2021-3522)
- Record
OESA-2022-1601- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Record
UBUNTU-CVE-2021-3522- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0334 No score
Updated gstreamer1.0-plugins packages fix security vulnerabilities
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags (CVE-2021-3522).
Overflows in AVC/HEVC NAL unit length calculations, which would lead to allocating infinite amounts of small memory blocks until OOM and could potentially also lead to memory corruptions.
- Record
MGASA-2021-0334- Updated
- 2026-11-02
OSVSUSE-SU-2022:3907-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2021-3522: Fixed ID3v2 tag frame size check and potential invalid reads (bsc#1185448).
- Record
SUSE-SU-2022:3907-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3911-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
- Record
SUSE-SU-2022:3911-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3916-1 No score
Security update for gstreamer-0_10-plugins-base
This update for gstreamer-0_10-plugins-base fixes the following issues:
- CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
- Record
SUSE-SU-2022:3916-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:3801-1 No score
Security update for gstreamer-plugins-base
This update for gstreamer-plugins-base fixes the following issues:
- CVE-2023-37327: Fixed FLAC file parsing integer overflow (bsc#1213128).
- CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow (bsc#1213131).
- CVE-2021-3522: Fixed frame size check and potential invalid reads (bsc#1185448).
- Record
SUSE-SU-2023:3801-1- Updated
- 2026-11-02
OSVUSN-4959-1 No score
gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
- Record
USN-4959-1- Updated
- 2026-11-02
Affected products
- gstreamer
- netapp active iq unified manager
- netapp e-series santricity os controller
- netapp e-series santricity storage manager
- netapp e-series santricity web services
- netapp hci management node
- netapp oncommand insight
- netapp oncommand workflow automation
- netapp santricity unified manager
- netapp snapmanager
- netapp solidfire
- oracle openjdk
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-baseAlpine:v3.18 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.19 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.20 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.21 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.22 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.23 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-baseAlpine:v3.24 |
before 1.18.4-r0 | 1.18.4-r0 |
gst-plugins-base1.0Debian:12 |
before 1.18.4-2 | 1.18.4-2 |
gst-plugins-base1.0Debian:13 |
before 1.18.4-2 | 1.18.4-2 |
gst-plugins-base1.0Debian:14 |
before 1.18.4-2 | 1.18.4-2 |
Show 31 moreShow less
| Package | Affected | Fixed |
|---|---|---|
gst-plugins-base1.0Debian:9 |
before 1.10.4-1+deb9u2, plus listed versions 1.10.4-11.10.4-1+deb9u1 |
1.10.4-1+deb9u2 |
gst-plugins-base1.0Debian:10 |
before 1.14.4-2+deb10u1, plus listed versions 1.14.4-2 |
1.14.4-2+deb10u1 |
gstreamer1.0-plugins-baseMageia:7 |
before 1.16.0-2.1.mga7 | 1.16.0-2.1.mga7 |
gstreamer1.0-plugins-badMageia:7 |
before 1.16.0-1.2.mga7 | 1.16.0-1.2.mga7 |
gstreamer1.0-plugins-badMageia:7 |
before 1.16.0-1.2.mga7.tainted | 1.16.0-1.2.mga7.tainted |
gstreamer1.0-plugins-baseMageia:8 |
before 1.18.3-1.1.mga8 | 1.18.3-1.1.mga8 |
gstreamer1.0-plugins-badMageia:8 |
before 1.18.3-1.1.mga8 | 1.18.3-1.1.mga8 |
gstreamer1.0-plugins-badMageia:8 |
before 1.18.3-1.1.mga8.tainted | 1.18.3-1.1.mga8.tainted |
gstreamer-plugins-baseopenEuler:20.03-LTS-SP1 |
before 0.10.36-22.oe1 | 0.10.36-22.oe1 |
gstreamer1-plugins-baseopenEuler:20.03-LTS-SP1 |
before 1.16.2-2.oe1 | 1.16.2-2.oe1 |
gstreamer1-plugins-baseopenEuler:20.03-LTS-SP2 |
before 1.16.2-2.oe1 | 1.16.2-2.oe1 |
gstreamer1-plugins-baseopenEuler:20.03-LTS-SP3 |
before 1.16.2-2.oe1 | 1.16.2-2.oe1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Module for Package Hub 15 SP3 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Micro 5.2 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseopenSUSE:Leap Micro 5.2 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseopenSUSE:Leap 15.3 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseopenSUSE:Leap 15.4 |
before 1.16.3-150200.4.6.2 | 1.16.3-150200.4.6.2 |
gstreamer-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.8.3-13.6.1 | 1.8.3-13.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server 12 SP5 |
before 1.8.3-13.6.1 | 1.8.3-13.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.8.3-13.6.1 | 1.8.3-13.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 1.8.3-13.6.1 | 1.8.3-13.6.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 0.10.36-18.6.1 | 0.10.36-18.6.1 |
gstreamer-0_10-plugins-baseSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 0.10.36-18.6.1 | 0.10.36-18.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.12.5-150000.3.6.1 | 1.12.5-150000.3.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.12.5-150000.3.6.1 | 1.12.5-150000.3.6.1 |
gstreamer-plugins-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.12.5-150000.3.6.1 | 1.12.5-150000.3.6.1 |
gstreamer-plugins-baseopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.12.5-150000.3.6.1 | 1.12.5-150000.3.6.1 |
gst-plugins-base1.0Ubuntu:Pro:16.04:LTS |
before 1.8.3-1ubuntu0.3+esm1, plus listed versions 1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1 Show 9 moreShow less1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.3-1ubuntu0.11.8.3-1ubuntu0.21.8.3-1ubuntu0.3 |
1.8.3-1ubuntu0.3+esm1 |
gst-plugins-base1.0Ubuntu:18.04:LTS |
before 1.14.5-0ubuntu1~18.04.3, plus listed versions 1.12.3-11.12.4-11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1 Show 6 moreShow less1.14.0-2ubuntu11.14.1-1ubuntu1~ubuntu18.04.11.14.1-1ubuntu1~ubuntu18.04.21.14.4-1ubuntu1.1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.2 |
1.14.5-0ubuntu1~18.04.3 |
gst-plugins-base1.0Ubuntu:20.04:LTS |
before 1.16.2-4ubuntu0.1, plus listed versions 1.16.1-11.16.2-11.16.2-21.16.2-2ubuntu31.16.2-2ubuntu41.16.2-4 |
1.16.2-4ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3522 is a medium vulnerability (CVSS 5.5) in Gstreamer, published April 24, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.37%, the 92nd percentile. Fixed in gst-plugins-base 1.18.4-r0.
References
bugzilla.redhat.com/show_bug.cgi?id=1954761
oracle.com/security-alerts/cpuoct2021.html
security.netapp.com/advisory/ntap-20211022-0004
security.gentoo.org/glsa/202208-31
nvd.nist.gov/vuln/detail/CVE-2021-3522
github.com/advisories/GHSA-x3cx-v22q-v4cr
Show 26 moreShow less
security.alpinelinux.org/vuln/CVE-2021-3522
security-tracker.debian.org/tracker/CVE-2021-3522
advisories.mageia.org/MGASA-2021-0334.html
bugs.mageia.org/show_bug.cgi?id=28977
gitlab.freedesktop.org/gstreamer/gst-plugins-bad/-/merge_requests/2103
debian.org/security/2021/dsa-4903
ubuntu.com/security/notices/USN-4959-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1237
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1601
suse.com/support/update/announcement/2022/suse-su-20223907-1
bugzilla.suse.com/1185448
gstreamer.freedesktop.org/security/sa-2021-0001.html
cve.org/CVERecord?id=CVE-2021-3522