Threats tagged 'ghsa-8f88-phh5-g894'

A heap buffer overflow vulnerability exists in gst-plugins-base due to improper validation of GstVideoMeta metadata during video buffer processing. This flaw allows a local attacker controlling the sending side of a GStreamer IPC pipeline to craft buffers with fabricated plane strides and offsets that exceed the actual memory allocation, potentially causing out-of-bounds reads or writes. Exploitation may lead to denial of service or code execution within the affected process. Red Hat has released security updates addressing this issue in gstreamer1-plugins-base for Red Hat Enterprise Linux 10.