CVE-2016-9808

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.10.2

Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds write and crash, via a crafted series of skip and count pairs in the FLIC decoder.

Recommendations For versions prior to 1.10.2, update to version 1.10.2 or later to resolve the issue. As a temporary workaround, consider disabling the FLIC decoder until a patch is available. Restrict access to the FLIC decoder module to minimize the risk of exploitation.