{"id":"CVE-2016-9635","aliases":["ALPINE-CVE-2016-9635","DEBIAN-CVE-2016-9635","DLA-727-1","DSA-3723-1","DSA-3724-1","EUVD-2016-10437","GHSA-r6qf-x4mq-x26g","MGASA-2016-0424","RHSA-2016:2975","RHSA-2017:0019","RHSA-2017:0020","SUSE-SU-2016:3288-1","SUSE-SU-2016:3303-1","SUSE-SU-2017:0210-1","SUSE-SU-2017:0225-1","SUSE-SU-2017:0237-1","UBUNTU-CVE-2016-9635"],"status":"published","title":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.08839,"percentile":0.95227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-11-24T00:00:00Z","modified":"2026-10-24T10:30:47Z","fixes":[{"ecosystem":"Alpine:v3.7","package":"gst-plugins-good","fixed_in":["1.10.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"gst-plugins-good1","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"gst-plugins-good1","fixed_in":["1.8.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"gst-plugins-good1","fixed_in":["1.10.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gst-plugins-good1.0","fixed_in":["1.10.1-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gst-plugins-good1.0","fixed_in":["1.10.1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gst-plugins-good1.0","fixed_in":["1.10.1-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-good0.10","fixed_in":["0.10.31-3+nmu1ubuntu5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.2.4-1~ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"gst-plugins-good0.10","fixed_in":["0.10.31-3+nmu4ubuntu2.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.8.2-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.7","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"gst-plugins-good1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"gst-plugins-good1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"gst-plugins-good1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"gst-plugins-good0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-3+nmu1+deb7u1"}]}],"versions":["0.10.31-3+nmu1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-2+deb8u2"}]}],"versions":["1.4.4-2","1.4.4-2+deb8u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"gst-plugins-good0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-3+nmu4+deb8u2"}]}],"versions":["0.10.31-3+nmu4","0.10.31-3+nmu4+deb8u1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"gstreamer0.10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-9.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"gstreamer1.0-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.3-2.1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"gstreamer-plugins-good-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"gstreamer-plugins-good-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"gstreamer-plugins-good-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"gstreamer-plugins-good-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.23-4.el6_8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gstreamer-plugins-good-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gstreamer-plugins-good-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gstreamer-plugins-good-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gstreamer-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gstreamer-plugins-good-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.31-12.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.5-3.el7_3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-2.3.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-9.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-16.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-16.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.30-5.14.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.30-5.14.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-13.3.3"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-13.3.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-good0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-3+nmu1ubuntu5.1"}]}],"versions":["0.10.31-3+nmu1ubuntu3","0.10.31-3+nmu1ubuntu4","0.10.31-3+nmu1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-1~ubuntu1.1"}]}],"versions":["1.2.0-1ubuntu1","1.2.1-1ubuntu1","1.2.1-1ubuntu2","1.2.2-1ubuntu1","1.2.3-1ubuntu1","1.2.3-1ubuntu2","1.2.4-1~ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gst-plugins-good0.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-3+nmu4ubuntu2.16.04.1"}]}],"versions":["0.10.31-3+nmu4ubuntu2~gcc5.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-1ubuntu0.2"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gstreamer","product":"gstreamer"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3724","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0019.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2975.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3723","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0020.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/94499","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://gstreamer.freedesktop.org/releases/1.10/#1.10.2","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/11/24/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=774834","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://security.gentoo.org/glsa/201705-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-advancing-exploitation.html","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","evidence","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9635","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r6qf-x4mq-x26g"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-9635","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9635","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0424.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19830","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-2975.html","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/12/05/8","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2975","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1397441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1401874","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2975.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9634","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9634","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9634","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9635","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9807","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9808","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0019","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0019.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0020","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0020.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163288-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1012102","tags":["report"]},{"url":"https://bugzilla.suse.com/1012103","tags":["report"]},{"url":"https://bugzilla.suse.com/1012104","tags":["report"]},{"url":"https://bugzilla.suse.com/1013653","tags":["report"]},{"url":"https://bugzilla.suse.com/1013655","tags":["report"]},{"url":"https://bugzilla.suse.com/1013663","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9810","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163303-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170210-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170225-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170237-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-9635","tags":["report"]},{"url":"https://www.ubuntu.com/usn/usn-3135-1/","tags":["report"]},{"url":"https://scarybeastsecurity.blogspot.ch/2016/11/0day-exploit-advancing-exploitation.html","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-08-06T02:59:03.142Z","updated_at":"2026-11-02T14:33:31.764001Z"}],"euvd":[{"id":"EUVD-2016-10437","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:01:00Z","modified":"2024-08-06T02:59:03Z","updated_at":"2026-11-03T02:22:26.803486Z"}],"ghsa":[{"id":"GHSA-r6qf-x4mq-x26g","title":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2022-05-14T03:55:00Z","modified":"2023-02-03T05:00:50Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:51.988629Z"}],"nvd":[{"id":"CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:59:01.99Z","modified":"2026-06-17T00:56:21.753Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:35.029632Z"}],"osv":[{"id":"ALPINE-CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:59:01.99Z","modified":"2026-09-22T06:30:27.269652175Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:59:01.99Z","modified":"2026-10-24T10:30:47.818806455Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:59:01.99Z","modified":"2026-09-22T07:02:57.140417402Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"RHSA-2016:2975","title":"Red Hat Security Advisory: gstreamer-plugins-good security update","status":"published","published":"2024-09-15T23:52:20Z","modified":"2026-08-01T10:02:40Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2017:0019","title":"Red Hat Security Advisory: gstreamer-plugins-good security update","status":"published","published":"2024-09-15T23:52:26Z","modified":"2026-08-01T10:02:41Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:0020","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2024-09-15T23:52:31Z","modified":"2026-08-01T10:02:41Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-9635","description":"Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by providing a 'skip count' that goes beyond initialized buffer.","status":"published","published":"2017-01-27T22:59:00Z","modified":"2026-04-22T11:05:58.39839Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-727-1","title":"gst-plugins-good0.10 - security update","status":"published","published":"2016-11-30T00:00:00Z","modified":"2026-03-09T02:09:15.311399Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3723-1","title":"gst-plugins-good1.0 - security update","status":"published","published":"2016-11-24T00:00:00Z","modified":"2026-03-09T01:22:21.712127Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"DSA-3724-1","title":"gst-plugins-good0.10 - security update","status":"published","published":"2016-11-24T00:00:00Z","modified":"2026-03-09T01:18:58.635453Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0424","title":"Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities","description":"Multiple flaws were discovered in GStreamer's FLC/FLI/FLX media file\nformat decoding plug-in. A remote attacker could use these flaws to\ncause an application using GStreamer to crash or, potentially, execute\narbitrary code with the privileges of the user running the application\n(CVE-2016-9634, CVE-2016-9635, CVE-2016-9636, CVE-2016-9808).\n\nAn invalid memory read access flaw was found in GStreamer's FLC/FLI/FLX\nmedia file format decoding plug-in. A remote attacker could use this\nflaw to cause an application using GStreamer to crash\n(CVE-2016-9807, CVE-2016-9810).\n\nNote that CVE-2016-9810 only affected gstreamer1.0-plugins-good.\n","status":"published","published":"2016-12-29T10:29:11Z","modified":"2026-04-16T06:25:55.523939193Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:3288-1","title":"Security update for gstreamer-plugins-good","description":"\nThis update for gstreamer-plugins-good fixes the following issues:\n\n* CVE-2016-9807: flic decoder invalid read could lead to crash [bsc#1013655]\n* CVE-2016-9634: flic out-of-bounds write could lead to code execution  [bsc#1012102]\n* CVE-2016-9635: flic out-of-bounds write could lead to code execution [bsc#1012103]\n* CVE-2016-9635: flic out-of-bounds write could lead to code execution [bsc#1012104]\n* CVE-2016-9808: A maliciously crafted flic file can still cause invalid memory accesses. [bsc#1013653]\n* CVE-2016-9810: A maliciously crafted flic file can still cause invalid memory accesses [bsc#1013663]\n\n","status":"published","published":"2016-12-29T08:10:32Z","modified":"2026-02-04T03:30:25.016205Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3303-1","title":"Security update for gstreamer-plugins-good","description":"\nThis update for gstreamer-plugins-good fixes the following security issues:\n\n- CVE-2016-9807: Flic decoder invalid read could lead to crash. (bsc#1013655)\n- CVE-2016-9634: Flic out-of-bounds write could lead to code execution. (bsc#1012102)\n- CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012103)\n- CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012104)\n- CVE-2016-9808: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013653)\n- CVE-2016-9810: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013663)\n","status":"published","published":"2016-12-30T13:17:28Z","modified":"2026-02-04T02:51:37.137551Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0210-1","title":"Security update for gstreamer-0_10-plugins-good","description":"\nThis update for gstreamer-0_10-plugins-good fixes the following issues:\n\n- CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102)\n- CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103)\n- CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104)\n- CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655)\n- CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653)\n- CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663)\n","status":"published","published":"2017-01-19T16:27:07Z","modified":"2026-02-04T02:50:36.36167Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0225-1","title":"Security update for gstreamer-0_10-plugins-good","description":"\ngstreamer-0_10-plugins-good was updated to fix six security issues.\n\nThese security issues were fixed:\n\n- CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102)\n- CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103)\n- CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104).\n- CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655)\n- CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653)\n- CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663)\n","status":"published","published":"2017-01-20T12:26:52Z","modified":"2026-02-04T04:21:16.586021Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0237-1","title":"Security update for gstreamer-0_10-plugins-good","description":"\ngstreamer-0_10-plugins-good was updated to fix five security issues.\n\nThese security issues were fixed:\n\n- CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103).\n- CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102).\n- CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663).\n- CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655).\n- CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653).\n\nTo install this update libbz2-1 needs to be installed if it isn't already present on the system.\n","status":"published","published":"2017-01-20T13:53:43Z","modified":"2026-02-04T03:10:48.798388Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}