CVE-2021-3522 GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags

Description

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

Affected products and versions

Product	Affected versions	Fixed in
GStreamer	Versions not published

Other CVEs of GStreamer

The 10 CVEs of GStreamer →

CVE-2022-1924 DOS / potential heap overwrite in mkv demuxing using lzo decompression Not rated CVE-2022-1923 DOS / potential heap overwrite in mkv demuxing using bzip decompression Not rated CVE-2022-2122 DOS / potential heap overwrite in qtdemux using zlib decompression Not rated CVE-2022-1925 DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression Not rated