« List of all CVEs

CVE-2016-9811

Published: 1/13/2017 Last updated: 8/6/2024 Reserved: 12/4/2016

The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ico file.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (2)

conf-gstreamer gstreamer

Products affected (1)

Product Vendor Version
n/a n/a < 0dcc53abf58d572d34c5313de85f607cd33fc691

References (20)