Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2022-1925

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.

  • Published: Jul 19, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-1925
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
gstreamer_project / gstreamer - 1.20.3
debian / debian_linux 10.0 10.0.x
debian / debian_linux 11.0 11.0.x