The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < dcc3cb920bf7ba66ac5e9272293a9ba5f80917ee |