MGASA-2021-0187
Updated gstreamer1.0 packages fix security vulnerabilities
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files (SA-2021-0002).
GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files (SA-2021-0003).
GStreamer before 1.18.4 might do an out-of-bounds read when handling certain RealMedia files or streams (SA-2021-0004).
GStreamer before 1.18.4 might cause stack corruptions with streams that have more than 64 audio channels (SA-2021-0005).
It might be possible for a malicious third party to trigger a crash in the application, but possibly also an arbitrary code execution with the privileges of the target user.
What each source reports
OSV No score
Updated gstreamer1.0 packages fix security vulnerabilities
GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files (SA-2021-0002).
GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files (SA-2021-0003).
GStreamer before 1.18.4 might do an out-of-bounds read when handling certain RealMedia files or streams (SA-2021-0004).
GStreamer before 1.18.4 might cause stack corruptions with streams that have more than 64 audio channels (SA-2021-0005).
It might be possible for a malicious third party to trigger a crash in the application, but possibly also an arbitrary code execution with the privileges of the target user.
- Record
MGASA-2021-0187- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gstreamer1.0-libavMageia:7 |
before 1.16.0-1.1.mga7 | 1.16.0-1.1.mga7 |
gstreamer1.0-plugins-goodMageia:7 |
before 1.16.0-1.1.mga7 | 1.16.0-1.1.mga7 |
gstreamer1.0-plugins-uglyMageia:7 |
before 1.16.0-1.1.mga7 | 1.16.0-1.1.mga7 |
gstreamer1.0-plugins-uglyMageia:7 |
before 1.16.0-1.1.mga7.tainted | 1.16.0-1.1.mga7.tainted |
gstreamer1.0-libavMageia:8 |
before 1.18.3-1.1.mga8 | 1.18.3-1.1.mga8 |
gstreamer1.0-plugins-goodMageia:8 |
before 1.18.3-1.2.mga8 | 1.18.3-1.2.mga8 |
gstreamer1.0-plugins-uglyMageia:8 |
before 1.18.3-1.1.mga8 | 1.18.3-1.1.mga8 |
gstreamer1.0-plugins-uglyMageia:8 |
before 1.18.3-1.1.mga8.tainted | 1.18.3-1.1.mga8.tainted |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0187 is a vulnerability with no CVSS score yet in gstreamer1.0-libav, published April 15, 2021. No source lists public exploit code. Fixed in gstreamer1.0-libav 1.16.0-1.1.mga7.
References
advisories.mageia.org/MGASA-2021-0187.html
bugs.mageia.org/show_bug.cgi?id=28685
gstreamer.freedesktop.org/security/sa-2021-0002.html