Published: 02/06/2021 Updated: 28/09/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

GStreamer prior to 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gstreamer project gstreamer
netapp snapmanager -
netapp oncommand workflow automation -
netapp oncommand insight -
netapp e-series santricity storage manager -
netapp solidfire -
netapp hci management node -
netapp active iq unified manager -
netapp santricity unified manager -
netapp e-series santricity web services -
netapp e-series santricity os controller
oracle openjdk 8

A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible The highest threat from this vulnerability is to system availability (CVE-2021-3522) ...

There is a flaw in the xml entity encoding functionality of libxml2 An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read The most likely impact of this flaw is to application availability, with some potential impact to confidentiali ...

A flaw was found in gstreamer-plugins-base where an out-of-bounds read when handling certain ID3v2 tags is possible The highest threat from this vulnerability is to system availability (CVE-2021-3522) ...

Vulnerability in Java SE version 8u301 Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Java SE as well as unauthorized update ...

CWE-125 https://bugzilla.redhat.com/show_bug.cgi?id=1954761 https://www.oracle.com/security-alerts/cpuoct2021.html https://security.netapp.com/advisory/ntap-20211022-0004/https://security.gentoo.org/glsa/202208-31 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2024-2407.html

CVE-2021-3522

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect