CVE-2016-9634

Critical

Published: 27/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in the flx_decode_delta_fli function in the FLIC decoder in GStreamer before version 1.10.2 allows remote attackers to execute arbitrary code or cause application crashes.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, posing a significant security risk to the system and potentially leading to application downtime.

Recommendation

It is recommended to update GStreamer to version 1.10.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via the start_line parameter.