CVE-2018-7263

gstreamer1: The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package...

CVE-2018-7263 is fixed in 19 products on 1 platform, first by RHSA-2020:1631, released April 28, 2020. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
9.8
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0252
84th percentile

The GStreamer library provides a streaming media framework based on graphs of media data filters. The libmad package is an MPEG audio decoder capable of 24-bit output. Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fix(es): * libmad: Double-free in the mad_decoder_run() function (CVE-2018-7263) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
SDL · RHEL 8 0:1.2.15-37.el8 RHSA-2020:1631 Apr 28, 2020
SDL · ol 8 0:1.2.15-37.el8 ELSA-2020-1631 May 5, 2020
SDL-devel · RHEL 8 0:1.2.15-37.el8 RHSA-2020:1631 Apr 28, 2020
SDL-devel · ol 8 0:1.2.15-37.el8 ELSA-2020-1631 May 5, 2020
SDL2 · RHEL 8 0:2.0.10-2.el8 RHSA-2020:1631 Apr 28, 2020
SDL2 · ol 8 0:2.0.10-2.el8 ELSA-2020-1631 May 5, 2020
SDL2-devel · RHEL 8 0:2.0.10-2.el8 RHSA-2020:1631 Apr 28, 2020
SDL2-devel · ol 8 0:2.0.10-2.el8 ELSA-2020-1631 May 5, 2020
SDL2-static · RHEL 8 0:2.0.10-2.el8 RHSA-2020:1631 Apr 28, 2020
SDL2-static · ol 8 0:2.0.10-2.el8 ELSA-2020-1631 May 5, 2020
gstreamer1 · RHEL 8 0:1.16.1-2.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1 · ol 8 0:1.16.1-2.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-devel · RHEL 8 0:1.16.1-2.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-devel · ol 8 0:1.16.1-2.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-bad-free · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-bad-free · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-bad-free-devel · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-bad-free-devel · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-base · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-base · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-base-devel · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-base-devel · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-good · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-good · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-good-gtk · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-good-gtk · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
gstreamer1-plugins-ugly-free · RHEL 8 0:1.16.1-1.el8 RHSA-2020:1631 Apr 28, 2020
gstreamer1-plugins-ugly-free · ol 8 0:1.16.1-1.el8 ELSA-2020-1631 May 5, 2020
libmad · RHEL 8 0:0.15.1b-25.el8 RHSA-2020:1631 Apr 28, 2020
libmad · ol 8 0:0.15.1b-25.el8 ELSA-2020-1631 May 5, 2020
libmad-devel · RHEL 8 0:0.15.1b-25.el8 RHSA-2020:1631 Apr 28, 2020
libmad-devel · ol 8 0:0.15.1b-25.el8 ELSA-2020-1631 May 5, 2020
orc · RHEL 8 0:0.4.28-3.el8 RHSA-2020:1631 Apr 28, 2020
orc · ol 8 0:0.4.28-3.el8 ELSA-2020-1631 May 5, 2020
orc-compiler · RHEL 8 0:0.4.28-3.el8 RHSA-2020:1631 Apr 28, 2020
orc-compiler · ol 8 0:0.4.28-3.el8 ELSA-2020-1631 May 5, 2020
orc-devel · RHEL 8 0:0.4.28-3.el8 RHSA-2020:1631 Apr 28, 2020
orc-devel · ol 8 0:0.4.28-3.el8 ELSA-2020-1631 May 5, 2020