Security Advisory 2024-0009 (GHSL-2024-236, CVE-2024-47543)
|
|
| Summary |
MP4/MOV demuxer out-of-bounds read |
| Date |
2024-12-03 20:00 |
| Affected Versions |
GStreamer gst-plugins-good < 1.24.10 |
| IDs |
GStreamer-SA-2024-0009
GHSL-2024-236
CVE-2024-47543 |
Details
Out-of-bounds read in the MP4/MOV demuxer that can lead to crashes for certain
input files.
Impact
It is possible for a malicious third party to trigger an out-of-bounds read
that can result in a crash of the application.
Solution
The gst-plugins-good 1.24.10 release addresses the issue. People using older
branches of GStreamer should apply the patch and recompile.
References
The GStreamer project
CVE Database Entries
GStreamer releases
1.24 (current stable)
Patches
