CVE-2021-3522: Gstreamer

Medium severity, CVSS 5.5. EPSS: 5.4% chance of exploitation in the next 30 days.

GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.

Affected products

• Gstreamer Gstreamer: before 1.18.4 (fixed in 1.18.4)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp E-Series Santricity OS Controller: from 11.0.0, up to and including 11.70.1
• Netapp E-Series Santricity Storage Manager: affected versions not specified
• Netapp E-Series Santricity Web Services: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Netapp Santricity Unified Manager: affected versions not specified
• Netapp Snapmanager: affected versions not specified
• Netapp Solidfire: affected versions not specified
• Oracle Openjdk: version 8 only

Published 2021-06-02. Last modified 2026-06-17.