Vulnerabilities > CVE-2021-3497 - Use After Free vulnerability in multiple products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2021-04-19

Updated: 2022-09-28

Summary

GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.

Vulnerable Configurations

Part	Description	Count
Application	Gstreamer_Project Gstreamer Project Gstreamer 0.10.0 Gstreamer Project Gstreamer 0.10.1 Gstreamer Project Gstreamer 0.10.2 Gstreamer Project Gstreamer 0.10.3 Gstreamer Project Gstreamer 0.10.4 Gstreamer Project Gstreamer 0.10.5 Gstreamer Project Gstreamer 0.10.6 Gstreamer Project Gstreamer 0.10.7 Gstreamer Project Gstreamer 0.10.8 Gstreamer Project Gstreamer 0.10.9 Gstreamer Project Gstreamer 0.10.10 Gstreamer Project Gstreamer 0.10.11 Gstreamer Project Gstreamer 0.10.12 Gstreamer Project Gstreamer 0.10.13 Gstreamer Project Gstreamer 0.10.14 Gstreamer Project Gstreamer 0.10.15 Gstreamer Project Gstreamer 0.10.16 Gstreamer Project Gstreamer 0.10.17 Gstreamer Project Gstreamer 0.10.18 Gstreamer Project Gstreamer 0.10.19 Gstreamer Project Gstreamer 0.10.20 Gstreamer Project Gstreamer 0.10.21 Gstreamer Project Gstreamer 0.10.22 Gstreamer Project Gstreamer 0.10.23 Gstreamer Project Gstreamer 0.10.24 Gstreamer Project Gstreamer 0.10.25 Gstreamer Project Gstreamer 0.10.26 Gstreamer Project Gstreamer 0.10.27 Gstreamer Project Gstreamer 0.10.28 Gstreamer Project Gstreamer 0.10.29 Gstreamer Project Gstreamer 0.10.30 Gstreamer Project Gstreamer 0.10.31 Gstreamer Project Gstreamer 0.10.32 Gstreamer Project Gstreamer 0.10.33 Gstreamer Project Gstreamer 0.10.34 Gstreamer Project Gstreamer 0.10.35 Gstreamer Project Gstreamer 0.10.36 Gstreamer Project Gstreamer 1.0.0 Gstreamer Project Gstreamer 1.0.1 Gstreamer Project Gstreamer 1.0.2 Gstreamer Project Gstreamer 1.0.3 Gstreamer Project Gstreamer 1.0.4 Gstreamer Project Gstreamer 1.0.5 Gstreamer Project Gstreamer 1.0.6 Gstreamer Project Gstreamer 1.0.7 Gstreamer Project Gstreamer 1.0.8 Gstreamer Project Gstreamer 1.0.9 Gstreamer Project Gstreamer 1.0.10 Gstreamer Project Gstreamer 1.1.1 Gstreamer Project Gstreamer 1.1.2 Gstreamer Project Gstreamer 1.1.3 Gstreamer Project Gstreamer 1.1.4 Gstreamer Project Gstreamer 1.1.90 Gstreamer Project Gstreamer 1.2.0 Gstreamer Project Gstreamer 1.2.1 Gstreamer Project Gstreamer 1.2.2 Gstreamer Project Gstreamer 1.2.3 Gstreamer Project Gstreamer 1.2.4 Gstreamer Project Gstreamer 1.3.1 Gstreamer Project Gstreamer 1.3.2 Gstreamer Project Gstreamer 1.3.3 Gstreamer Project Gstreamer 1.3.90 Gstreamer Project Gstreamer 1.3.91 Gstreamer Project Gstreamer 1.4.0 Gstreamer Project Gstreamer 1.4.1 Gstreamer Project Gstreamer 1.4.2 Gstreamer Project Gstreamer 1.4.3 Gstreamer Project Gstreamer 1.4.4 Gstreamer Project Gstreamer 1.4.5 Gstreamer Project Gstreamer 1.5.1 Gstreamer Project Gstreamer 1.5.2 Gstreamer Project Gstreamer 1.5.90 Gstreamer Project Gstreamer 1.5.91 Gstreamer Project Gstreamer 1.6.0 Gstreamer Project Gstreamer 1.6.1 Gstreamer Project Gstreamer 1.6.2 Gstreamer Project Gstreamer 1.6.3 Gstreamer Project Gstreamer 1.6.4 Gstreamer Project Gstreamer 1.7.1 Gstreamer Project Gstreamer 1.7.2 Gstreamer Project Gstreamer 1.7.90 Gstreamer Project Gstreamer 1.7.91 Gstreamer Project Gstreamer 1.8.0 Gstreamer Project Gstreamer 1.8.1 Gstreamer Project Gstreamer 1.8.2 Gstreamer Project Gstreamer 1.8.3 Gstreamer Project Gstreamer 1.9.1 Gstreamer Project Gstreamer 1.9.2 Gstreamer Project Gstreamer 1.9.90 Gstreamer Project Gstreamer 1.10.0 Gstreamer Project Gstreamer 1.10.1 Gstreamer Project Gstreamer 1.10.2 Gstreamer Project Gstreamer 1.10.3 Gstreamer Project Gstreamer 1.10.4 Gstreamer Project Gstreamer 1.10.5 Gstreamer Project Gstreamer 1.11.0 Gstreamer Project Gstreamer 1.11.1 Gstreamer Project Gstreamer 1.11.2 Gstreamer Project Gstreamer 1.11.90 Gstreamer Project Gstreamer 1.11.91 Gstreamer Project Gstreamer 1.12.0 Gstreamer Project Gstreamer 1.12.1 Gstreamer Project Gstreamer 1.12.2 Gstreamer Project Gstreamer 1.12.3 Gstreamer Project Gstreamer 1.12.4 Gstreamer Project Gstreamer 1.12.5 Gstreamer Project Gstreamer 1.13.1 Gstreamer Project Gstreamer 1.13.90 Gstreamer Project Gstreamer 1.13.91 Gstreamer Project Gstreamer 1.14.0 Gstreamer Project Gstreamer 1.14.1 Gstreamer Project Gstreamer 1.14.2 Gstreamer Project Gstreamer 1.14.3 Gstreamer Project Gstreamer 1.14.4 Gstreamer Project Gstreamer 1.14.5 Gstreamer Project Gstreamer 1.15.1 Gstreamer Project Gstreamer 1.15.2 Gstreamer Project Gstreamer 1.15.90 Gstreamer Project Gstreamer 1.16.0 Gstreamer Project Gstreamer 1.16.1 Gstreamer Project Gstreamer 1.16.2 Gstreamer Project Gstreamer 1.17.1 Gstreamer Project Gstreamer 1.17.2 Gstreamer Project Gstreamer 1.17.90 Gstreamer Project Gstreamer 1.18.0 Gstreamer Project Gstreamer 1.18.1 Gstreamer Project Gstreamer 1.18.2 Gstreamer Project Gstreamer 1.18.3	128
OS	Redhat Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0	2
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References