CVE-2021-3522

Description

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1954761 ↗
• https://www.oracle.com/security-alerts/cpuoct2021.html ↗
• https://security.netapp.com/advisory/ntap-20211022-0004/ ↗
• https://security.gentoo.org/glsa/202208-31 ↗