USN-8855-1: GStreamer Bad Plugins vulnerability
USN-8855-1 warns that GStreamer Bad Plugins can crash or run code via a crafted WAV file.
Ubuntu security notice USN-8855-1 reports that GStreamer Bad Plugins failed to validate the size of multi-channel audio blocks. An attacker could use a specially crafted WAV file to crash the program, causing a denial of service, or possibly execute arbitrary code. The notice does not cite a CVE or say that exploitation has been observed.
- GStreamer Bad Plugins mishandled multi-channel audio block sizes.
- A crafted WAV may crash the program or possibly run arbitrary code.
- Ubuntu published the issue as security notice USN-8855-1.
- The notice does not report active exploitation.
- Vendors
- Canonical
- Products
- GStreamer Bad PluginsGStreamer
- Organizations
- Ubuntu
From the original article
It was discovered that GStreamer Bad Plugins incorrectly validated the size of multi-channel audio blocks. An attacker could possibly use this issue with a specially crafted WAV file to cause the program to crash, resulting in a denial of service, or possibly execute arbitrary code.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.