Wind River Support Network

HomeDefectsLIN10-10222

Fixed

LIN10-10222 : Security Advisory - gstreamer1.0-plugins-good - CVE-2022-1920

Created: Jun 16, 2022 Updated: Aug 28, 2022

Resolved Date: Jul 28, 2022

Found In Version: 10.17.41.1

Fix Version: 10.17.41.27

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

atroskademux: Avoid integer-overflow resulting in heap corruption in WavPack header handling code

https://gstreamer.freedesktop.org/security/sa-2022-0004.html

CREATE(Triage):(User=admin) CVE-2022-1920 (https://nvd.nist.gov/vuln/detail/CVE-2022-1920)

CVEs

CVE-2022-1920