GStreamer vmnc Decoder Vulnerability Exposes Sensitive Information

CVE-2016-9446

What is CVE-2016-9446?

The vmnc decoder in GStreamer is susceptible to a vulnerability due to inadequate initialization of the render canvas. This lack of proper initialization can allow remote attackers to exploit the system by sending specially crafted vmnc movie files. These files, even consisting of a single frame, can trigger the thumbnailing process without actual rendering on the allocated canvas, potentially leaking sensitive information to unauthorized entities.

References