VULNERABILITY INTELLIGENCE

CVE-2016-10199

CVSS score7.5 HIGH

EPSS probability4.23%

CISA KEVNot currently listed

Published2017-02-09

Last modified2026-06-17

Description

The qtdemux_tag_add_str_full function in gst/isomp4/qtdemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted tag value.