CVE-2016-9812 Denial of service in n/a
Remote attackers can cause a denial of service via an out-of-bounds read in the GStreamer MPEG-TS decoder.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-9812?
CVE-2016-9812 is a high-severity denial of service vulnerability in Gstreamer Gstreamer, published on 13 Jan 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a too small section.
Weakness: CWE-125
Which versions are affected by CVE-2016-9812?
It affects 1 product.
Products include Gstreamer Gstreamer.
How do I fix CVE-2016-9812?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-9812 being exploited?
There is no known exploitation of CVE-2016-9812 in the wild and no public exploit code.
Other vulnerabilities in Gstreamer Gstreamer
- CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-3085 GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37328 GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-37329 GStreamer SRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-38103 GStreamer RealMedia File Parsing Integer Overflow Remote Code Execution Vulnerability
Sources
Also known as ALPINE-CVE-2016-9812, DEBIAN-CVE-2016-9812, GHSA-p7qh-jxmh-67r6, UBUNTU-CVE-2016-9812.