Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseGHSA-5pmw-9j92-3c4c
GHSA-5pmw-9j92-3c4c:
Rust vulnerability analysis and mitigation
Overview
The OpenH264 Rust API (openh264-sys2) contains a heap overflow vulnerability in its decoding functions. The vulnerability was discovered in versions prior to 0.8.0 and affects both the source code implementation and systems using Cisco's pre-compiled DLL. The issue stems from a race condition between a Sequence Parameter Set (SPS) memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. The vulnerability was fixed in OpenH264 version 2.6.0 and openh264-sys2 version 0.8.0 (GitHub Advisory, NVD).
Technical details
The vulnerability has been assigned a CVSS v4.0 base score of 8.6 (High severity) with the vector string CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. The issue affects both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode. The vulnerability is classified under CWE-122 (Heap-based Buffer Overflow) and CWE-787 (Out-of-bounds Write). The fix was implemented in upstream commit 63db555 and subsequently integrated into the 0.6.6 release for source users and 0.8.0 release for DLL users (RustSec, GitHub Advisory).
Impact
A successful exploitation of this vulnerability could allow an attacker to cause an unexpected crash in the victim's user decoding client and potentially execute arbitrary commands on the victim's host by exploiting the heap overflow. The vulnerability affects systems processing untrusted video files and could lead to significant security breaches with high impacts on confidentiality, integrity, and availability (NVD).
Mitigation and workarounds
Users are strongly advised to upgrade to OpenH264 version 2.6.0 or later. For those using the source feature only, versions >=0.6.6 are safe. Users relying on libloading must upgrade to version 0.8.0 and use Cisco's latest DLL version >=2.6.0. There are no known workarounds for this vulnerability, making the upgrade the only secure solution (GitHub Advisory, RustSec).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management