CVE-2019-9928

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code…

published April 24, 2019

CVSS
—
EPSS
6%
Percentile
93.2
In the wild
Unconfirmed
What it is

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05935 · 93.2th percentile
Published
2019-04-24T14:48Z
EPSS history
Timeline
  • 24 APR 14:48Z
    GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code…
    cvelistv5