gstreamer-plugins-good (SUSE:Linux Enterprise Module for Basesystem 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP2 package gstreamer-plugins-good, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2021-3185 — CVSS 9.8 (critical): A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could…
• CVE-2021-3497 — CVSS 7.8 (high): GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files.
• CVE-2021-3498 — CVSS 7.8 (high): GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files.