Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matros…

Published 4 y ago 2022-07-19 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.8

v3.1 · NVD

CISA KEV

not known exploited

EPSS

0.5%

percentile 43%

Public exploits

none known

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Exploit prediction (EPSS)

0.50% probability of exploitation in the next 30 days, higher than 43% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	7.8	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

n/a GStreamer

Classification

Weakness

CWE-122 Heap-based Buffer Overflow
CWE-190 Integer Overflow or Wraparound
CWE-787 Out-of-bounds Write

References

gitlab.freedesktop.org /gstreamer/gstreamer/-/issues/1226 · x_refsource_MISC, x_transferred
lists.debian.org /debian-lts-announce/2022/08/msg00001.html · mailing-list, x_refsource_MLIST, x_transferred
debian.org /security/2022/dsa-5204 · vendor-advisory, x_refsource_DEBIAN, x_transferred

Sources

CVE List: CVE-2022-1920
NVD: CVE-2022-1920

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.