Threats tagged 'ghsa-pc5r-2484-vm3g'

A vulnerability in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS) allows an attacker who can control or inject content into a manifest URL to include file:// URIs. This causes the application to read arbitrary local files, potentially disclosing sensitive information. The issue affects certain versions of GStreamer plugins used in Red Hat Enterprise Linux 10.2 and later, Fedora 43, and others. The vulnerability has a high confidentiality impact but does not affect integrity or availability.