CVE-2022-1925

DOS / potencial escritura excesiva de la pila en la demuxación de mkv usando la descompresión HEADERSTRIP. Desbordamiento de enteros en el elemento matroskaparse en la función gst_matroska_decompress_data que causa un desbordamiento del montón. Debido a las restricciones en el tamaño de los trozos en el elemento matroskademux, el desbordamiento no puede ser provocado, sin embargo el elemento matroskaparse no presenta comprobaciones de tamaño.

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using HEADERSTRIP decompression. This vulnerability can result in application crash, memory corruption, and code execution.

An update that fixes 7 vulnerabilities is now available. This update for gstreamer-plugins-good fixes the following issues. Fixed integer overflow in WavPack header handling code. Fixed integer overflow resulting in heap corruption in avidemux element. Fixed integer overflows in mkv demuxing. Fixed integer overflows in mkv demuxing using bzip. Fixed integer overflows in mkv demuxing using lzo. Fixed integer overflows in mkv demuxing using HEADERSTRIP. Fixed integer overflows in qtdemux using zlib.