Denial of Service Vulnerability in GStreamer by GStreamer Team

CVE-2017-5845

What is CVE-2017-5845?

A memory access vulnerability exists in the GStreamer framework, specifically in the gst_avi_demux_parse_ncdt function. This flaw can be exploited by remote attackers using a malformed ncdt sub-tag that incorrectly interacts with surrounding tags, leading to unexpected memory reads and potential application crashes. Users running versions prior to 1.10.3 are particularly at risk, as this defect can cause significant disruptions to streaming services.

References