CyberRota Analysis
AI-GeneratedA heap-based out-of-bounds read vulnerability exists in GStreamer's gst-plugins-good, specifically when parsing FLAC audio stream headers in Matroska or WebM files. This flaw can lead to the disclosure of a small amount of adjacent heap memory if a user is tricked into opening a crafted malicious file. Users and organizations utilizing GStreamer in environments where media files are processed should prioritize addressing this vulnerability to mitigate potential information leaks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occur when parsing FLAC audio stream headers embedded in a Matroska or WebM container file. The vulnerability is triggered by a boundary check that does not account for the full size of the data being copied, allowing a small read past the end of the allocated buffer. An attacker could exploit this by crafting a malicious Matroska or WebM file and tricking a user into opening it, potentially leaking a small amount of adjacent heap memory.