CVE-2016-9446

The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by…

published January 23, 2017

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 frame vmnc movie that does not draw to the allocated render canvas.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03599 · 89.3th percentile
Published
2017-01-23T21:00Z
EPSS history
Timeline
  • 23 JAN 21:00Z
    The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by…
    cvelistv5