CVE-2016-9445 Integer overflow in n/a
Remote attackers can cause a denial of service via a crash in the GStreamer vmnc decoder by exploiting an integer overflow with large dimensions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9445?
CVE-2016-9445 is a high-severity vulnerability in Gstreamer Gstreamer, published on 23 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial of service (crash) via large width and height values, which triggers a buffer overflow.
Weakness: CWE-190
Which versions are affected by CVE-2016-9445?
It affects 1 product.
Products include Gstreamer Gstreamer.
How do I fix CVE-2016-9445?
Apply the vendor's patch.
Is CVE-2016-9445 being exploited?
There is no known exploitation of CVE-2016-9445 in the wild and no public exploit code.
Other vulnerabilities in Gstreamer Gstreamer
- CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
Sources
Also known as DEBIAN-CVE-2016-9445, GHSA-vw8c-5cg5-c7cj, UBUNTU-CVE-2016-9445.