RHSA-2023:2260 - Vulnerability-Lookup

RHSA-2023:2260

Vulnerability from csaf_redhat - Published: 2023-05-09 10:01 - Updated: 2026-03-17 16:05

Summary

Red Hat Security Advisory: gstreamer1-plugins-good security update

Severity

Moderate

Notes

Topic: An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920) * gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924) * gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925) * gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-1920

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska file. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-1921

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the avi demuxer when processing a specially crafted AVI file. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-1922

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-1923

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using bzip decompression. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-1924

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using lzo decompression. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-1925

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using HEADERSTRIP decompression. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

CVE-2022-2122

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Vendor Fix For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2023:2260

References

URL

Category

	https://access.redhat.com/errata/RHSA-2023:2260	self
	https://access.redhat.com/security/updates/classi…	external
	https://access.redhat.com/documentation/en-us/red…	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2130935	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2130949	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2130955	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2130959	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2131003	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2131007	external
	https://bugzilla.redhat.com/show_bug.cgi?id=2131018	external
	https://security.access.redhat.com/data/csaf/v2/a…	self
	https://access.redhat.com/security/cve/CVE-2022-1920	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2130935	external
	https://www.cve.org/CVERecord?id=CVE-2022-1920	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1920	external
	https://gstreamer.freedesktop.org/security/sa-202…	external
	https://access.redhat.com/security/cve/CVE-2022-1921	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2130949	external
	https://www.cve.org/CVERecord?id=CVE-2022-1921	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1921	external
	https://gstreamer.freedesktop.org/security/sa-202…	external
	https://access.redhat.com/security/cve/CVE-2022-1922	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2130955	external
	https://www.cve.org/CVERecord?id=CVE-2022-1922	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1922	external
	https://gstreamer.freedesktop.org/security/sa-202…	external
	https://access.redhat.com/security/cve/CVE-2022-1923	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2130959	external
	https://www.cve.org/CVERecord?id=CVE-2022-1923	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1923	external
	https://access.redhat.com/security/cve/CVE-2022-1924	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2131003	external
	https://www.cve.org/CVERecord?id=CVE-2022-1924	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1924	external
	https://access.redhat.com/security/cve/CVE-2022-1925	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2131007	external
	https://www.cve.org/CVERecord?id=CVE-2022-1925	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-1925	external
	https://access.redhat.com/security/cve/CVE-2022-2122	self
	https://bugzilla.redhat.com/show_bug.cgi?id=2131018	external
	https://www.cve.org/CVERecord?id=CVE-2022-2122	external
	https://nvd.nist.gov/vuln/detail/CVE-2022-2122	external

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header() (CVE-2022-1920)\n\n* gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files (CVE-2022-1921)\n\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression (CVE-2022-1922)\n\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression (CVE-2022-1923)\n\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression (CVE-2022-1924)\n\n* gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression (CVE-2022-1925)\n\n* gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression (CVE-2022-2122)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:2260",
        "url": "https://access.redhat.com/errata/RHSA-2023:2260"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2130935",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130935"
      },
      {
        "category": "external",
        "summary": "2130949",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130949"
      },
      {
        "category": "external",
        "summary": "2130955",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130955"
      },
      {
        "category": "external",
        "summary": "2130959",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130959"
      },
      {
        "category": "external",
        "summary": "2131003",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131003"
      },
      {
        "category": "external",
        "summary": "2131007",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131007"
      },
      {
        "category": "external",
        "summary": "2131018",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131018"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2260.json"
      }
    ],
    "title": "Red Hat Security Advisory: gstreamer1-plugins-good security update",
    "tracking": {
      "current_release_date": "2026-03-17T16:05:32+00:00",
      "generator": {
        "date": "2026-03-17T16:05:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2023:2260",
      "initial_release_date": "2023-05-09T10:01:44+00:00",
      "revision_history": [
        {
          "date": "2023-05-09T10:01:44+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-05-09T10:01:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-17T16:05:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.2.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.src",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.src",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.18.4-6.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.18.4-6.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.18.4-6.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.18.4-6.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-6.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-6.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.18.4-6.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.18.4-6.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.18.4-6.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.18.4-6.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-6.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.18.4-6.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.18.4-6.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.18.4-6.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.18.4-6.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-6.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.18.4-6.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.18.4-6.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.18.4-6.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.18.4-6.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.18.4-6.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.18.4-6.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.src",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1920",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2130935"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska file. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1920"
        },
        {
          "category": "external",
          "summary": "RHBZ#2130935",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130935"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1920",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1920"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1920",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1920"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0004.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0004.html"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in gst_matroska_demux_add_wvpk_header()"
    },
    {
      "cve": "CVE-2022-1921",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2130949"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the avi demuxer when processing a specially crafted AVI file. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1921"
        },
        {
          "category": "external",
          "summary": "RHBZ#2130949",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130949"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1921",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1921"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1921",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1921"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0001.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0001.html"
        }
      ],
      "release_date": "2022-05-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Heap-based buffer overflow in the avi demuxer when handling certain AVI files"
    },
    {
      "cve": "CVE-2022-1922",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2130955"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1922"
        },
        {
          "category": "external",
          "summary": "RHBZ#2130955",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130955"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1922",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1922"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1922",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1922"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using zlib decompression"
    },
    {
      "cve": "CVE-2022-1923",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2130959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using bzip decompression. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2130959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2130959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1923"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using bz2 decompression"
    },
    {
      "cve": "CVE-2022-1924",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2131003"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using lzo decompression. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1924"
        },
        {
          "category": "external",
          "summary": "RHBZ#2131003",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131003"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1924",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1924"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1924",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1924"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using lzo decompression"
    },
    {
      "cve": "CVE-2022-1925",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2131007"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the mkv demuxer when processing a specially crafted Matroska/WebM file using HEADERSTRIP decompression. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-1925"
        },
        {
          "category": "external",
          "summary": "RHBZ#2131007",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131007"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-1925",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-1925"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-1925",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1925"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2022-0002.html"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in mkv demuxing using HEADERSTRIP decompression"
    },
    {
      "cve": "CVE-2022-2122",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-07-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2131018"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
          "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-2122"
        },
        {
          "category": "external",
          "summary": "RHBZ#2131018",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2131018"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-2122",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-2122"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-2122",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-2122"
        }
      ],
      "release_date": "2022-05-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T10:01:44+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2260"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.src",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-debugsource-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.18.4-6.el9.x86_64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.aarch64",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.i686",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.ppc64le",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.s390x",
            "AppStream-9.2.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.18.4-6.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer-plugins-good: Potential heap overwrite in mp4 demuxing using zlib decompression"
    }
  ]
}

CVE-2022-1923 (GCVE-0-2022-1923)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:13 – Updated: 2024-08-03 00:17

Summary

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.909Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:08:19.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1923",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1923",
    "datePublished": "2022-07-19T19:13:29.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.909Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1924 (GCVE-0-2022-1924)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:13 – Updated: 2024-08-03 00:17

Summary

DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.985Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:07:11.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1924",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1924",
    "datePublished": "2022-07-19T19:13:35.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1925 (GCVE-0-2022-1925)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:10 – Updated: 2024-08-03 00:17

Summary

DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.947Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can\u0027t be triggered, however the matroskaparse element has no size checks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:07:39.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1925",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can\u0027t be triggered, however the matroskaparse element has no size checks."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1925",
    "datePublished": "2022-07-19T19:10:49.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.947Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1922 (GCVE-0-2022-1922)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:09 – Updated: 2024-08-03 00:17

Summary

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.943Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:08:05.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1922",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1922",
    "datePublished": "2022-07-19T19:09:22.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1920 (GCVE-0-2022-1920)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:08 – Updated: 2024-08-03 00:17

Summary

Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.985Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:07:53.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1920",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1920",
    "datePublished": "2022-07-19T19:08:30.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.985Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1921 (GCVE-0-2022-1921)

Vulnerability from cvelistv5 – Published: 2022-07-19 00:00 – Updated: 2024-08-03 00:17

Summary

Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-190

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…
	https://lists.debian.org/debian-lts-announce/2022…	mailing-list
	https://www.debian.org/security/2022/dsa-5204	vendor-advisory

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-07T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-1921",
    "datePublished": "2022-07-19T00:00:00.000Z",
    "dateReserved": "2022-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:17:00.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-2122 (GCVE-0-2022-2122)

Vulnerability from cvelistv5 – Published: 2022-07-19 19:10 – Updated: 2024-08-03 00:24

Summary

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.

Severity ?

No CVSS data available.

CWE

CWE-122

Assigner

redhat

References

URL

Tags

	https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST
	https://www.debian.org/security/2022/dsa-5204	vendor-advisoryx_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	GStreamer	Affected: 1.20.3

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:24:44.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
          },
          {
            "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
          },
          {
            "name": "DSA-5204",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5204"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "GStreamer",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.20.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-10T02:06:59.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
        },
        {
          "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
        },
        {
          "name": "DSA-5204",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5204"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-2122",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "GStreamer",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.20.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-122"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225",
              "refsource": "MISC",
              "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225"
            },
            {
              "name": "[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html"
            },
            {
              "name": "DSA-5204",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2022/dsa-5204"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-2122",
    "datePublished": "2022-07-19T19:10:55.000Z",
    "dateReserved": "2022-06-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:24:44.188Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.