Threats tagged 'ghsa-w4qv-7936-q2x3'

A vulnerability in GStreamer gst-plugins-good (avidemux) allows integer overflow in the superindex and subindex parsers, leading to out-of-bounds reads. This flaw can be triggered by opening or previewing a crafted AVI file because avidemux is auto-plugged by common GStreamer components. The issue can cause application crashes or limited memory disclosure but does not enable arbitrary code execution or privilege escalation under default settings. The vulnerability is fixed in gst-plugins-good version 1.28.6.