CVE-2016-9809
gir1.2-gst-plugins-bad-1.0: Off-by-one error in the gst_h264_parse_set_caps function in GStreamerbefore 1.10.2 allows remote attackers to have un...
CVE-2016-9809 is fixed in 6 products on 1 platform, first by gir1.2-gst-plugins-bad-1.0 1.10.2-1ubuntu1, released January 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0291
87th percentile
Off-by-one error in the gst_h264_parse_set_caps function in GStreamerbefore 1.10.2 allows remote attackers to have unspecified impact via acrafted file, which triggers an out-of-bounds read.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-gst-plugins-bad-1.0 · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | gir1.2-gst-plugins-bad-1.0 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gir1.2-gst-plugins-bad-1.0 · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | gir1.2-gst-plugins-bad-1.0 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-opencv · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | gstreamer1.0-opencv 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-opencv · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | gstreamer1.0-opencv 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-plugins-bad · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | gstreamer1.0-plugins-bad 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-plugins-bad · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | gstreamer1.0-plugins-bad 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-plugins-bad-apps · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | gstreamer1.0-plugins-bad-apps 1.10.2-1ubuntu1 | Jan 16, 2026 |
| gstreamer1.0-plugins-bad-apps · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | gstreamer1.0-plugins-bad-apps 1.10.2-1ubuntu1 | Jan 16, 2026 |
| libgstreamer-opencv1.0-0 · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | libgstreamer-opencv1.0-0 1.10.2-1ubuntu1 | Jan 16, 2026 |
| libgstreamer-opencv1.0-0 · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | libgstreamer-opencv1.0-0 1.10.2-1ubuntu1 | Jan 16, 2026 |
| libgstreamer-plugins-bad1.0-0 · Ubuntu 24.10 (oracular) | 1.10.2-1ubuntu1 | libgstreamer-plugins-bad1.0-0 1.10.2-1ubuntu1 | Jan 16, 2026 |
| libgstreamer-plugins-bad1.0-0 · Ubuntu 25.04 (plucky) | 1.10.2-1ubuntu1 | libgstreamer-plugins-bad1.0-0 1.10.2-1ubuntu1 | Jan 16, 2026 |