Security Advisory 2024-0016 (GHSL-2024-247, CVE-2024-47599)
|
|
| Summary |
Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences |
| Date |
2024-12-03 20:00 |
| Affected Versions |
GStreamer gst-plugins-good < 1.24.10 |
| IDs |
GStreamer-SA-2024-0016
GHSL-2024-247
CVE-2024-47599 |
Details
Insufficient error handling in the JPEG decoder that can lead to NULL-pointer
dereferences, and that can cause crashes for certain input files.
Impact
It is possible for a malicious third party to trigger NULL-pointer
dereferences that can result in a crash of the application.
Solution
The gst-plugins-good 1.24.10 release addresses the issue. People using older
branches of GStreamer should apply the patch and recompile.
References
The GStreamer project
CVE Database Entries
GStreamer releases
1.24 (current stable)
Patches
