CVE-2016-10199 in GStreamer
Summary
The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
02/01/2017
Disclosure
02/09/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96754 | GStreamer Tag Value qtdemux.c qtdemux_tag_add_str_full out-of-bounds | 125 | Not defined | Official fix | CVE-2016-10199 |