Alpine/gst-plugins-good1: high 7.5

The qtdemux_parse_samples function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds heap read) via vectors inv

Action: Upgrade gst-plugins-good1 to 1.8.3-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2017-5840#Alpine:v3.4/gst-plugins-good1
• https://security.alpinelinux.org/vuln/CVE-2017-5840

published 2017-02-09T15:59:01.457Z · modified 2026-06-15T18:24:44.673416Z · JSON