Log in Start free

Vulnerability · Published Jul 19, 2022 · Assigned by redhat

CVE-2022-1924

High 7.8

In plain English

A high-severity heap buffer overflow in GStreamer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 62.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9gstreamer1-plugins-good1.18.4-6.el9ALSA-2023:2260
AlmaLinux:9gstreamer1-plugins-good-gtk1.18.4-6.el9ALSA-2023:2260
Alpine:v3.20gst-plugins-good1.20.3-r0ALPINE-CVE-2022-1924
Alpine:v3.21gst-plugins-good1.20.3-r0ALPINE-CVE-2022-1924
Alpine:v3.22gst-plugins-good1.20.3-r0ALPINE-CVE-2022-1924
Alpine:v3.23gst-plugins-good1.20.3-r0ALPINE-CVE-2022-1924
Alpine:v3.24gst-plugins-good1.20.3-r0ALPINE-CVE-2022-1924
Debian:12gst-plugins-good1.01.20.3-1DEBIAN-CVE-2022-1924
Debian:13gst-plugins-good1.01.20.3-1DEBIAN-CVE-2022-1924
Debian:14gst-plugins-good1.01.20.3-1DEBIAN-CVE-2022-1924
Ubuntu:22.04:LTSgst-plugins-good1.01.20.3-0ubuntu1UBUNTU-CVE-2022-1924

Affected products (as reported)

VendorProductVersions
n/a GStreamer 1.20.3

Weakness: CWE-122

References