Denial of Service and Potential Heap Overwrite in GStreamer Plugin by Red Hat

CVE-2022-2122

What is CVE-2022-2122?

The GStreamer plugin has a vulnerability in the qtdemux element causing a Denial of Service due to an integer overflow in the qtdemux_inflate function. This issue can lead to a segment fault or, depending on the libc and operating system used, it might result in a heap overwrite. This specific vulnerability poses severe risks for applications utilizing GStreamer, allowing an attacker to potentially exploit the underlying system's memory, leading to unauthorized access or disruptions.

References