Every CVE Search/ Get API key

CVE-2022-1920

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which...

7.8 HighFix available

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.50%Down 1.7 points since Jul 20, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
CVE-2022-1920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-190, CWE-787
Updated
2026-11-02
CVE List No score

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
CVE-2022-1920
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2022-25192 No score

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
EUVD-2022-25192
Updated
2026-11-03
GitHub AdvisoriesGHSA-hvfw-pcx7-j7qm 7.8

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which...

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
GHSA-hvfw-pcx7-j7qm
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-122, CWE-190, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2022-1920 7.8

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
ALPINE-CVE-2022-1920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVDEBIAN-CVE-2022-1920 7.8

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
DEBIAN-CVE-2022-1920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 14 moreShow less
OSVOESA-2022-1736 7.8

gstreamer1-plugins-good security update

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.

Security Fix(es):

Potential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920)

Potential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122)

Heap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921)

Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922)

Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923)

Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924)

Potential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)

Record
OESA-2022-1736
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2260 7.8

Red Hat Security Advisory: gstreamer1-plugins-good security update

Record
RHSA-2023:2260
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-1920 7.8

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
UBUNTU-CVE-2022-1920
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:2260 No score

Moderate: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

  • gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)
  • gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921)
  • gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922)
  • gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)
  • gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)
  • gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925)
  • gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2260
Updated
2026-11-02
OSV No score

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Record
CVE-2022-1920
Weakness
CWE-122
Updated
2026-11-02
OSVMGASA-2022-0322 No score

Updated gstreamer1.0-plugins-good packages fix security vulnerability

It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-1920, CVE-2022-1921)

It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-1922, CVE-2022-1923, CVE-2022-1924, CVE-2022-1925, CVE-2022-2122)

Record
MGASA-2022-0322
Updated
2026-11-02
OSVMGASA-2023-0354 No score

Updated gstreamer packages fix many security vulnerabilities

Updated gstreamer packages fix many security issues (see the references below). Apart from the listed CVEs, ZDI-CAN-22300 is also fixed.

Record
MGASA-2023-0354
Updated
2026-11-02
OSVopenSUSE-SU-2024:12709-1 No score

gstreamer-plugins-good-1.22.0-2.1 on GA media

These are all security issues fixed in the gstreamer-plugins-good-1.22.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12709-1
Updated
2026-11-02
OSVSUSE-SU-2022:2911-1 No score

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues:

  • CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
  • CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
  • CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
  • CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
  • CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
  • CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
  • CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).
Record
SUSE-SU-2022:2911-1
Updated
2026-11-02
OSVSUSE-SU-2022:2957-1 No score

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues:

  • CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
  • CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
  • CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
  • CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
  • CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
  • CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
  • CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).
Record
SUSE-SU-2022:2957-1
Updated
2026-11-02
OSVSUSE-SU-2022:3906-1 No score

Security update for gstreamer-0_10-plugins-good

This update for gstreamer-0_10-plugins-good fixes the following issues:

  • CVE-2022-1920: Fixed an integer overflow while parsing matroska files (bsc#1201688).
  • CVE-2022-1921: Fixed an integer overflow while parsing avi files (bsc#1201693).
  • CVE-2022-1922: Fixed an integer overflow during mkv demuxing using zlib decompression (bsc#1201702).
  • CVE-2022-1923: Fixed an integer overflow during mkv demuxing using bzip decompression (bsc#1201704).
  • CVE-2022-1924: Fixed an integer overflow during mkv demuxing using lzo decompression (bsc#1201706).
  • CVE-2022-1925: Fixed an integer overflow during mkv demuxing using HEADERSTRIP decompression (bsc#1201707).
  • CVE-2022-2122: Fixed an integer overflow in qtdemux using zlib decompression (bsc#1201708).
Record
SUSE-SU-2022:3906-1
Updated
2026-11-02
OSVSUSE-SU-2022:3908-1 No score

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues:

  • CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
  • CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
  • CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
  • CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
  • CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
  • CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
  • CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).
Record
SUSE-SU-2022:3908-1
Updated
2026-11-02
OSVSUSE-SU-2023:3688-1 No score

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues:

  • CVE-2021-3497: Matroskademux: Fix extraction of multichannel WavPack (bsc#1184739).
  • CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).
  • CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).
  • CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).
  • CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).
  • CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).
  • CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).
  • CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).
  • CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128).
Record
SUSE-SU-2023:3688-1
Updated
2026-11-02
OSVUSN-5555-1 No score

gst-plugins-good1.0 vulnerabilities

It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-1920, CVE-2022-1921)

It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-1922, CVE-2022-1923, CVE-2022-1924, CVE-2022-1925, CVE-2022-2122)

Record
USN-5555-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gst-plugins-good
Alpine:v3.18
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.19
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.20
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.21
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.22
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.23
 before 1.20.3-r0
1.20.3-r0
gst-plugins-good
Alpine:v3.24
 before 1.20.3-r0
1.20.3-r0
gstreamer1-plugins-good
AlmaLinux:9
From an advisory covering 7 CVEs
 before 1.18.4-6.el9
1.18.4-6.el9
gstreamer1-plugins-good-gtk
AlmaLinux:9
From an advisory covering 7 CVEs
 before 1.18.4-6.el9
1.18.4-6.el9
gst-plugins-good1.0
Debian:12
 before 1.20.3-1
1.20.3-1
Show 61 moreShow less
Affected packages
PackageAffectedFixed
gst-plugins-good1.0
Debian:13
 before 1.20.3-1
1.20.3-1
gst-plugins-good1.0
Debian:14
 before 1.20.3-1
1.20.3-1
gst-plugins-good1.0
Debian:10
From an advisory covering 7 CVEs
 before 1.14.4-1+deb10u2, plus listed versions
1.14.4-11.14.4-1+deb10u1
1.14.4-1+deb10u2
gst-plugins-good1.0
Debian:11
From an advisory covering 7 CVEs
 before 1.18.4-2+deb11u1, plus listed versions
1.18.4-2
1.18.4-2+deb11u1
gstreamer1.0-plugins-good
Mageia:8
From an advisory covering 7 CVEs
 before 1.18.5-1.1.mga8
1.18.5-1.1.mga8
gstreamer1.0
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-plugins-base
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-omx
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-python
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-plugins-good
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-plugins-bad
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-plugins-ugly
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-rtsp-server
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-vaapi
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-devtools
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-libav
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-moodbar
Mageia:9
From an advisory covering 16 CVEs
 before 1.2.1-5.mga9
1.2.1-5.mga9
gstreamer1.0-editing-services
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9
1.22.8-1.mga9
gstreamer1.0-plugins-bad
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9.tainted
1.22.8-1.mga9.tainted
gstreamer1.0-plugins-ugly
Mageia:9
From an advisory covering 16 CVEs
 before 1.22.8-1.mga9.tainted
1.22.8-1.mga9.tainted
gstreamer1-plugins-good
openEuler:20.03-LTS-SP1
From an advisory covering 7 CVEs
 before 1.16.2-3.oe1
1.16.2-3.oe1
gstreamer1-plugins-good
openEuler:20.03-LTS-SP3
From an advisory covering 7 CVEs
 before 1.16.2-3.oe1
1.16.2-3.oe1
gstreamer1-plugins-good
openEuler:22.03-LTS
From an advisory covering 7 CVEs
 before 1.16.2-5.oe2203
1.16.2-5.oe2203
gstreamer1-plugins-good
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer1-plugins-good-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer1-plugins-good-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer1-plugins-good-gtk
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer1-plugins-good-gtk-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer1-plugins-good-qt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 7 CVEs
 before 0:1.18.4-6.el9
0:1.18.4-6.el9
gstreamer-plugins-good
SUSE:OpenStack Cloud 9
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 1.8.3-16.6.2
1.8.3-16.6.2
gstreamer-plugins-good
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Manager Proxy 4.1
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Manager Server 4.1
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
SUSE:Enterprise Storage 7
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
openSUSE:Leap 15.3
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-plugins-good
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 1.16.3-150200.3.9.1
1.16.3-150200.3.9.1
gstreamer-0_10-plugins-good
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 7 CVEs
 before 0.10.31-17.7.1
0.10.31-17.7.1
gstreamer-plugins-good
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 7 CVEs
 before 1.20.1-150400.3.3.1
1.20.1-150400.3.3.1
gstreamer-plugins-good
openSUSE:Leap 15.4
From an advisory covering 7 CVEs
 before 1.20.1-150400.3.3.1
1.20.1-150400.3.3.1
gstreamer-plugins-good
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 9 CVEs
 before 1.12.5-150000.3.7.2
1.12.5-150000.3.7.2
gstreamer-plugins-good
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 9 CVEs
 before 1.12.5-150000.3.7.2
1.12.5-150000.3.7.2
gst-plugins-good1.0
Ubuntu:Pro:16.04:LTS
 before 1.8.3-1ubuntu0.5+esm1, plus listed versions
1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1
Show 10 moreShow less
1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.2-1ubuntu0.31.8.3-1ubuntu0.31.8.3-1ubuntu0.41.8.3-1ubuntu0.5
1.8.3-1ubuntu0.5+esm1
gst-plugins-good1.0
Ubuntu:18.04:LTS
 before 1.14.5-0ubuntu1~18.04.3, plus listed versions
1.12.3-1ubuntu11.12.4-1ubuntu11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1
Show 4 moreShow less
1.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.2
1.14.5-0ubuntu1~18.04.3
gst-plugins-good1.0
Ubuntu:20.04:LTS
 before 1.16.3-0ubuntu1.1, plus listed versions
1.16.1-1ubuntu11.16.2-1ubuntu11.16.2-1ubuntu21.16.2-1ubuntu2.11.16.3-0ubuntu1
1.16.3-0ubuntu1.1
gst-plugins-good1.0
Ubuntu:22.04:LTS
 before 1.20.3-0ubuntu1, plus listed versions
1.18.5-1ubuntu21.18.5-1ubuntu31.20.0-2ubuntu11.20.1-1ubuntu1
1.20.3-0ubuntu1
gst-plugins-good1.0
Ubuntu:Pro:16.04:LTS
From an advisory covering 7 CVEs
 before 1.8.3-1ubuntu0.5+esm1, plus listed versions
1.6.0-1ubuntu11.6.1-1ubuntu11.6.2-1ubuntu11.7.1-1ubuntu11.7.2-1ubuntu1
Show 10 moreShow less
1.7.90-1ubuntu11.7.91-1ubuntu11.8.0-1ubuntu11.8.1-1ubuntu0.11.8.2-1ubuntu0.11.8.2-1ubuntu0.21.8.2-1ubuntu0.31.8.3-1ubuntu0.31.8.3-1ubuntu0.41.8.3-1ubuntu0.5
1.8.3-1ubuntu0.5+esm1
gst-plugins-good1.0
Ubuntu:18.04:LTS
From an advisory covering 7 CVEs
 before 1.14.5-0ubuntu1~18.04.3, plus listed versions
1.12.3-1ubuntu11.12.4-1ubuntu11.13.1-1ubuntu11.13.91-1ubuntu11.14.0-1ubuntu1
Show 4 moreShow less
1.14.1-1ubuntu1~ubuntu18.04.11.14.4-1ubuntu1~ubuntu18.04.11.14.5-0ubuntu1~18.04.11.14.5-0ubuntu1~18.04.2
1.14.5-0ubuntu1~18.04.3
gst-plugins-good1.0
Ubuntu:20.04:LTS
From an advisory covering 7 CVEs
 before 1.16.3-0ubuntu1.1, plus listed versions
1.16.1-1ubuntu11.16.2-1ubuntu11.16.2-1ubuntu21.16.2-1ubuntu2.11.16.3-0ubuntu1
1.16.3-0ubuntu1.1

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-1920 is a high vulnerability (CVSS 7.8) in Debian Linux, published July 1, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. Fixed in gst-plugins-good 1.20.3-r0.

References

Show 82 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open