https://gstreamer.freedesktop.org/security/sa-2024-0002.html "Details Heap-based buffer overflow in the EXIF image tag parser when handling certain malformed streams before GStreamer 1.24.3 or 1.22.12. Impact It is possible for a malicious third party to trigger a crash in the application, and possibly also effect code execution through heap manipulation. Solution The gst-plugins-base 1.24.3 and 1.22.12 releases address the issue. People using older branches of GStreamer should apply the patch and recompile."
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1ceedfd2c1af3f1ff539d88a120296ffae85e0b2 "exiftag: Prevent integer overflows and out of bounds reads when handling undefined tags"
