CVE-2021-3185

9.8 criticalEPSS 2.5%

Critical (9.8) in freedesktop gst-plugins-bad. EPSS 2.5% chance of exploitation in the next 30 days.

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-120
Published: 2021-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freedesktop:gst-plugins-bad

References

https://bugzilla.redhat.com/show_bug.cgi?id=1917192
https://security.gentoo.org/glsa/202208-31
https://bugzilla.redhat.com/show_bug.cgi?id=1917192
https://security.gentoo.org/glsa/202208-31

Check your stack JSON