TI-2016-07943 Aliases CVE-2016-9813 GHSA-pvcc-25wc-frxr

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote…

LOW 35CWE-476Published 2017-01-13 · Updated 2024-08-06

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file.

Why it matters now

EPSS 0.07903 94th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:gstreamer:gstreamer::::::::	up to 1.10.1	Vulnerable	GStreamer

cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:* Versions up to 1.10.1 Vulnerable ·GStreamer

Remediation

Red Hat 1 advisory

RHSA-2017:0021 Released 2017-01-05 · Red Hat rating Moderate
gstreamer1-plugins-bad-free security update
- Red Hat Enterprise Linux Client (v. 7) gstreamer1-plugins-bad-free-1.4.5-6.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) gstreamer1-plugins-bad-free-1.4.5-6.el7_3, gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3
- Red Hat Enterprise Linux Server (v. 7) gstreamer1-plugins-bad-free-1.4.5-6.el7_3, gstreamer1-plugins-bad-free-1.4.5-6.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3, gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) gstreamer1-plugins-bad-free-1.4.5-6.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) gstreamer1-plugins-bad-free-devel-1.4.5-6.el7_3

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux Client (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux Client Optional (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux ComputeNode Optional (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux Server (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux Server Optional (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux Workstation (v. 7)	Fixed	RHSA-2017:0021
Red Hat Enterprise Linux Workstation Optional (v. 7)	Fixed	RHSA-2017:0021

Not affected: 3 products

Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Virtualization 3

Timeline

2026-10-02 Threatist record created from CVE-2016-9813
2026-10-03 Alias added: GHSA-pvcc-25wc-frxr

References

Exploit 1

42162

Advisory 6

Other 1

https://bugzilla.gnome.org/show_bug.cgi?id=775120

TI-2025-29786 In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read… CVSS 3.1HIGH 8.1
TI-2024-31895 GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer CVSS 4.0HIGH 8.6
TI-2024-31893 GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush CVSS 4.0HIGH 8.6
TI-2024-31887 GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header CVSS 4.0HIGH 8.6
TI-2024-31829 GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer CVSS 4.0HIGH 8.6
TI-2024-31828 GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a CVSS 4.0HIGH 8.6

See all 109 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences