CVE-2021-3522
GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.
- Score
- CVSS 3.1 5.5 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2021-06-02
- Last modified
- 2026-05-28
- Weaknesses
- CWE-125
Affected products
- Gstreamer (Gstreamer)
- Active Iq Unified Manager (Netapp)
- E-series Santricity Os Controller (Netapp)
- E-series Santricity Storage Manager (Netapp)
- E-series Santricity Web Services (Netapp)
- Hci Management Node (Netapp)
- Oncommand Insight (Netapp)
- Oncommand Workflow Automation (Netapp)
- Santricity Unified Manager (Netapp)
- Snapmanager (Netapp)
- Solidfire (Netapp)
- Openjdk (Oracle)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1954761
- https://security.gentoo.org/glsa/202208-31
- https://security.netapp.com/advisory/ntap-20211022-0004/
- https://www.oracle.com/security-alerts/cpuoct2021.html
