CVE-2019-9928

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

GStreamer before 1.16.0 has a heap-based buffer overflow in the RTSP connection parser via a crafted response from a server, potentially allowing remote code execution.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Apr 24, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-99298.8Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.CVE-2019-99309.8Various Lexmark products have an Integer Overflow.CVE-2019-99317.5Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.CVE-2019-99329.8Various Lexmark products have a Buffer Overflow (issue 2 of 3).CVE-2019-99339.8Various Lexmark products have a Buffer Overflow (issue 3 of 3).CVE-2019-99345.3Various Lexmark products have Incorrect Access Control (issue 1 of 2).CVE-2019-99355.3Various Lexmark products have Incorrect Access Control (issue 2 of 2).CVE-2019-99367.5In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlit CVE-2019-99377.5In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference i CVE-2019-99385.3The SHAREit application before 4.0.42 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots crea CVE-2019-99398.8The SHAREit application before 4.0.36 for Android allows a remote attacker (on the same network or joining public "open" Wi-Fi hotspots crea CVE-2019-99423.7A sandbox information disclosure exists in Twig before 1.38.0 and 2.x before 2.7.0 because, under some circumstances, it is possible to call