CVE-2016-9808 Memory corruption in n/a
Remote attackers can cause a denial of service via out-of-bounds write in the GStreamer FLIC decoder using crafted skip and count pairs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9808?
CVE-2016-9808 is a high-severity memory corruption vulnerability in Gstreamer Gstreamer, published on 13 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted series of skip and count pairs.
Weakness: CWE-787
Which versions are affected by CVE-2016-9808?
It affects 1 product.
Products include Gstreamer Gstreamer.
How do I fix CVE-2016-9808?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-9808 being exploited?
There is no known exploitation of CVE-2016-9808 in the wild and no public exploit code.
Other vulnerabilities in Gstreamer Gstreamer
- CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
Sources
Also known as ALPINE-CVE-2016-9808, CLEANSTART-2026-IY76311, DEBIAN-CVE-2016-9808, GHSA-26q7-7f46-37j5, UBUNTU-CVE-2016-9808.