gstreamer-plugins-good (SUSE:Enterprise Storage 7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Enterprise Storage 7 package gstreamer-plugins-good, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2022-1920 — CVSS 7.8 (high): Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing…
• CVE-2022-1921 — CVSS 7.8 (high): Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for…
• CVE-2022-1922 — CVSS 7.8 (high): DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in…
• CVE-2022-1923 — CVSS 7.8 (high): DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression…
• CVE-2022-1924 — CVSS 7.8 (high): DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression…
• CVE-2022-1925 — CVSS 7.8 (high): DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in…
• CVE-2022-2122 — CVSS 7.8 (high): DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which…