PT-2022-6790

CVE-2022-1923

·

Published

2022-05-18

·

Updated

2026-10-14

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Gstreamer (affected versions not specified)
Description The issue is related to an integer overflow in the matroskademux element in the bzip decompression function, which can cause a segfault or potentially a heap overwrite, depending on the libc used and the underlying OS capabilities. This could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service using a specially crafted file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2023:2260
ALT-PU-2022-2059
ALT-PU-2022-2898
CLEANSTART-2026-QO62654
DLA-3069-1
DSA-5204-1
MGASA-2022-0322
MGASA-2023-0354
OESA-2022-1736
OPENSUSE-SU-2022_2957-1
OPENSUSE-SU-2022_3908-1
RHSA-2023:2260
RHSA-2023_2260
ROSA-SA-2024-2462
SUSE-SU-2022:2911-1
SUSE-SU-2022:2957-1
SUSE-SU-2022:3906-1
SUSE-SU-2022:3908-1
SUSE-SU-2023:3688-1
USN-5555-1
Found an issue in the description? Have something to add? Feel free to write us 👾