{"id":"CVE-2022-1925","aliases":["ALPINE-CVE-2022-1925","ALSA-2023:2260","DEBIAN-CVE-2022-1925","DLA-3069-1","DSA-5204-1","EUVD-2022-25197","GHSA-v6c6-gcwr-p5pm","MGASA-2022-0322","MGASA-2023-0354","OESA-2022-1736","RHSA-2023:2260","SUSE-SU-2022:2911-1","SUSE-SU-2022:2957-1","SUSE-SU-2022:3906-1","SUSE-SU-2022:3908-1","SUSE-SU-2023:3688-1","UBUNTU-CVE-2022-1925","USN-5555-1"],"status":"published","title":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow...","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00464,"percentile":0.40459,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-190","CWE-787"],"published":"2022-07-01T11:05:00Z","modified":"2026-11-03T08:02:03Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"gst-plugins-good","fixed_in":["1.20.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gst-plugins-good1.0","fixed_in":["1.20.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gst-plugins-good1.0","fixed_in":["1.20.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gst-plugins-good1.0","fixed_in":["1.20.3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.8.3-1ubuntu0.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.14.5-0ubuntu1~18.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.16.3-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.20.3-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.4-1+deb10u2"}]}],"versions":["1.14.4-1","1.14.4-1+deb10u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:11","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-2+deb11u1"}]}],"versions":["1.18.4-2"],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"gstreamer1.0-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.5-1.1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-omx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-ugly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-rtsp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-vaapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-devtools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-libav","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-moodbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-5.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-editing-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-bad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9.tainted"}]}],"bundled":16},{"source":"osv","ecosystem":"Mageia:9","package":"gstreamer1.0-plugins-ugly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.8-1.mga9.tainted"}]}],"bundled":16},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-3.oe1"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-3.oe1"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.2-5.oe2203"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-gtk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gstreamer1-plugins-good-qt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18.4-6.el9"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-16.6.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-150200.3.9.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gstreamer-0_10-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.31-17.7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-150400.3.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-150000.3.7.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"gstreamer-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.5-150000.3.7.2"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.5+esm1"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.2-1ubuntu0.3","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.4","1.8.3-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3"}]}],"versions":["1.12.3-1ubuntu1","1.12.4-1ubuntu1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.4-1ubuntu1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.1"}]}],"versions":["1.16.1-1ubuntu1","1.16.2-1ubuntu1","1.16.2-1ubuntu2","1.16.2-1ubuntu2.1","1.16.3-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-0ubuntu1"}]}],"versions":["1.18.5-1ubuntu2","1.18.5-1ubuntu3","1.20.0-2ubuntu1","1.20.1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3-1ubuntu0.5+esm1"}]}],"versions":["1.6.0-1ubuntu1","1.6.1-1ubuntu1","1.6.2-1ubuntu1","1.7.1-1ubuntu1","1.7.2-1ubuntu1","1.7.90-1ubuntu1","1.7.91-1ubuntu1","1.8.0-1ubuntu1","1.8.1-1ubuntu0.1","1.8.2-1ubuntu0.1","1.8.2-1ubuntu0.2","1.8.2-1ubuntu0.3","1.8.3-1ubuntu0.3","1.8.3-1ubuntu0.4","1.8.3-1ubuntu0.5"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.5-0ubuntu1~18.04.3"}]}],"versions":["1.12.3-1ubuntu1","1.12.4-1ubuntu1","1.13.1-1ubuntu1","1.13.91-1ubuntu1","1.14.0-1ubuntu1","1.14.1-1ubuntu1~ubuntu18.04.1","1.14.4-1ubuntu1~ubuntu18.04.1","1.14.5-0ubuntu1~18.04.1","1.14.5-0ubuntu1~18.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-0ubuntu1.1"}]}],"versions":["1.16.1-1ubuntu1","1.16.2-1ubuntu1","1.16.2-1ubuntu2","1.16.2-1ubuntu2.1","1.16.3-0ubuntu1"],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gstreamer","product":"gstreamer"}],"references":[{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5204","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1925","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v6c6-gcwr-p5pm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1925","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2260","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1920","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1921","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1922","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1923","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1924","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1925","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2122","tags":["report"]},{"url":"https://bugzilla.redhat.com/2130935","tags":["report"]},{"url":"https://bugzilla.redhat.com/2130949","tags":["report"]},{"url":"https://bugzilla.redhat.com/2130955","tags":["report"]},{"url":"https://bugzilla.redhat.com/2130959","tags":["report"]},{"url":"https://bugzilla.redhat.com/2131003","tags":["report"]},{"url":"https://bugzilla.redhat.com/2131007","tags":["report"]},{"url":"https://bugzilla.redhat.com/2131018","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2260.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1925.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1925","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0322.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30728","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5555-1","tags":["advisory"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2022-0001.html","tags":["web","article"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2022-0002.html","tags":["web","article"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2022-0003.html","tags":["web"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2022-0004.html","tags":["web","article"]},{"url":"https://advisories.mageia.org/MGASA-2023-0354.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32071","tags":["report"]},{"url":"https://gstreamer.freedesktop.org/security/sa-2023-0011.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1736","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1924","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131003","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131007","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131018","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2260.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1920","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1921","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1922","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1923","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1924","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1925","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2122","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222911-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201688","tags":["report"]},{"url":"https://bugzilla.suse.com/1201693","tags":["report"]},{"url":"https://bugzilla.suse.com/1201702","tags":["report"]},{"url":"https://bugzilla.suse.com/1201704","tags":["report"]},{"url":"https://bugzilla.suse.com/1201706","tags":["report"]},{"url":"https://bugzilla.suse.com/1201707","tags":["report"]},{"url":"https://bugzilla.suse.com/1201708","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1923","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2122","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222957-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223906-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223908-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233688-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1184739","tags":["report"]},{"url":"https://bugzilla.suse.com/1213128","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-37327","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-1925","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1920","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1921","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1923","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2122","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T19:10:49Z","modified":"2024-08-03T00:17:00.947Z","cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:38.263045Z"}],"euvd":[{"id":"EUVD-2022-25197","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T19:10:49Z","modified":"2024-08-03T00:17:00Z","updated_at":"2026-11-03T03:25:59.967142Z"}],"ghsa":[{"id":"GHSA-v6c6-gcwr-p5pm","title":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow...","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-20T00:00:18Z","modified":"2023-06-27T18:30:26Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-190","CWE-787"],"updated_at":"2026-11-02T14:54:38.89081Z"}],"nvd":[{"id":"CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T20:15:11.08Z","modified":"2026-06-17T04:23:21.96Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-122","CWE-190"],"updated_at":"2026-11-02T14:07:23.686531Z"}],"osv":[{"id":"ALPINE-CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T20:15:11.08Z","modified":"2026-11-03T07:30:12.897875994Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"DEBIAN-CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T20:15:11.08Z","modified":"2026-11-03T08:02:03.458134918Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1736","title":"gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related.  Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins.\r\n\r\nSecurity Fix(es):\r\n\r\nPotential heap overwrite in the mkv demuxer when handling certain Matroska files in GStreamer versions before 1.20.3.(CVE-2022-1920)\r\n\r\nPotential heap overwrite in the qt demuxer when handling certain QuickTime/MP4 files in GStreamer versions before 1.20.3.(CVE-2022-2122)\r\n\r\nHeap-based buffer overflow in the avi demuxer when handling certain AVI files in GStreamer versions before 1.20.3.(CVE-2022-1921)\r\n\r\nPotential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1922)\r\n\r\nPotential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1923)\r\n\r\nPotential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1924)\r\n\r\nPotential heap overwrite in the mkv demuxer when handling certain Matroska/WebM files in GStreamer versions before 1.20.3.(CVE-2022-1925)","status":"published","published":"2022-07-01T11:05:00Z","modified":"2026-08-18T01:16:46.294170597Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2023:2260","title":"Red Hat Security Advisory: gstreamer1-plugins-good security update","status":"published","published":"2024-09-16T09:52:07Z","modified":"2026-08-01T10:03:22Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T20:15:00Z","modified":"2026-04-22T13:14:03.858752Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:52.391598Z"},{"id":"ALSA-2023:2260","title":"Moderate: gstreamer1-plugins-good security update","description":"GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)\n* gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921)\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922)\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925)\n* gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:53.602833249Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-1925","description":"DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.","status":"published","published":"2022-07-19T19:10:49Z","modified":"2026-10-28T02:30:57.014965801Z","cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:23.655778Z"},{"id":"DLA-3069-1","title":"gst-plugins-good1.0 - security update","status":"published","published":"2022-08-09T00:00:00Z","modified":"2026-03-09T01:19:40.235147Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5204-1","title":"gst-plugins-good1.0 - security update","status":"published","published":"2022-08-09T00:00:00Z","modified":"2026-03-09T02:10:51.077249Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0322","title":"Updated gstreamer1.0-plugins-good packages fix security vulnerability","description":"It was discovered that GStreamer Good Plugins incorrectly handled certain\nfiles. An attacker could possibly use this issue to execute arbitrary\ncode. (CVE-2022-1920, CVE-2022-1921)\n\nIt was discovered that GStreamer Good Plugins incorrectly handled certain\nfiles. An attacker could possibly use this issue to cause a denial of\nservice or execute arbitrary code. (CVE-2022-1922, CVE-2022-1923,\nCVE-2022-1924, CVE-2022-1925, CVE-2022-2122)\n","status":"published","published":"2022-09-10T20:26:43Z","modified":"2026-04-16T04:41:57.386127669Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"MGASA-2023-0354","title":"Updated gstreamer packages fix many security vulnerabilities","description":"Updated gstreamer packages fix many security issues (see the references\nbelow).\nApart from the listed CVEs, ZDI-CAN-22300 is also fixed.\n","status":"published","published":"2023-12-22T11:04:51Z","modified":"2026-04-16T04:43:04.943033915Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2022:2911-1","title":"Security update for gstreamer-plugins-good","description":"This update for gstreamer-plugins-good fixes the following issues:\n\n- CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).\n- CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).\n- CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).\n- CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).\n- CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).\n- CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).\n- CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).\n","status":"published","published":"2022-08-26T09:44:11Z","modified":"2026-02-04T04:40:01.933962Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2957-1","title":"Security update for gstreamer-plugins-good","description":"This update for gstreamer-plugins-good fixes the following issues:\n\n- CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).\n- CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).\n- CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).\n- CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).\n- CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).\n- CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).\n- CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).\n","status":"published","published":"2022-08-31T11:07:22Z","modified":"2026-02-04T04:08:18.964002Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:3906-1","title":"Security update for gstreamer-0_10-plugins-good","description":"This update for gstreamer-0_10-plugins-good fixes the following issues:\n\n- CVE-2022-1920: Fixed an integer overflow while parsing matroska files (bsc#1201688).\n- CVE-2022-1921: Fixed an integer overflow while parsing avi files (bsc#1201693).\n- CVE-2022-1922: Fixed an integer overflow during mkv demuxing using zlib decompression (bsc#1201702).\n- CVE-2022-1923: Fixed an integer overflow during mkv demuxing using bzip decompression (bsc#1201704).\n- CVE-2022-1924: Fixed an integer overflow during mkv demuxing using lzo decompression (bsc#1201706).\n- CVE-2022-1925: Fixed an integer overflow during mkv demuxing using HEADERSTRIP decompression (bsc#1201707).\n- CVE-2022-2122: Fixed an integer overflow in qtdemux using zlib decompression (bsc#1201708).\n","status":"published","published":"2022-11-08T11:30:12Z","modified":"2025-05-02T04:32:33.233908Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3908-1","title":"Security update for gstreamer-plugins-good","description":"This update for gstreamer-plugins-good fixes the following issues:\n\n- CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).\n- CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).\n- CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).\n- CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).\n- CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).\n- CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).\n- CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).\n","status":"published","published":"2022-11-08T11:31:28Z","modified":"2025-05-02T04:32:33.293132Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:3688-1","title":"Security update for gstreamer-plugins-good","description":"This update for gstreamer-plugins-good fixes the following issues:\n\n- CVE-2021-3497: Matroskademux: Fix extraction of multichannel WavPack (bsc#1184739).\n- CVE-2022-1920: Fixed integer overflow in WavPack header handling code (bsc#1201688).\n- CVE-2022-1921: Fixed integer overflow resulting in heap corruption in avidemux element (bsc#1201693).\n- CVE-2022-1922: Fixed integer overflows in mkv demuxing (bsc#1201702).\n- CVE-2022-1923: Fixed integer overflows in mkv demuxing using bzip (bsc#1201704).\n- CVE-2022-1924: Fixed integer overflows in mkv demuxing using lzo (bsc#1201706).\n- CVE-2022-1925: Fixed integer overflows in mkv demuxing using HEADERSTRIP (bsc#1201707).\n- CVE-2022-2122: Fixed integer overflows in qtdemux using zlib (bsc#1201708).\n- CVE-2023-37327: Fixed GStreamer FLAC File Parsing Integer Overflow (bsc#1213128).\n","status":"published","published":"2023-09-19T15:40:17Z","modified":"2026-02-04T03:57:30.895361Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-5555-1","title":"gst-plugins-good1.0 vulnerabilities","description":"It was discovered that GStreamer Good Plugins incorrectly handled certain files.\nAn attacker could possibly use this issue to execute arbitrary code.\n(CVE-2022-1920, CVE-2022-1921)\n\nIt was discovered that GStreamer Good Plugins incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service or\nexecute arbitrary code. (CVE-2022-1922, CVE-2022-1923, CVE-2022-1924,\nCVE-2022-1925, CVE-2022-2122)\n","status":"published","published":"2022-08-08T15:28:12Z","modified":"2026-06-25T13:31:19.423255469Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}