medium5.5
CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
Impact
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gstreamer | Gstreamer | before 1.18.4 |
| Netapp | Active Iq Unified Manager | All versions |
| Netapp | E-Series Santricity Os Controller | from 11.0.0 through 11.70.1 |
| Netapp | E-Series Santricity Storage Manager | All versions |
| Netapp | E-Series Santricity Web Services | All versions |
| Netapp | Hci Management Node | All versions |
| Netapp | Oncommand Insight | All versions |
| Netapp | Oncommand Workflow Automation | All versions |
| Netapp | Santricity Unified Manager | All versions |
| Netapp | Snapmanager | All versions |
| Netapp | Solidfire | All versions |
| Oracle | Openjdk | Version 8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=1954761
- https://security.gentoo.org/glsa/202208-31
- https://security.netapp.com/advisory/ntap-20211022-0004/
- https://www.oracle.com/security-alerts/cpuoct2021.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1954761
- https://security.gentoo.org/glsa/202208-31
- https://security.netapp.com/advisory/ntap-20211022-0004/
- https://www.oracle.com/security-alerts/cpuoct2021.html