Security Advisory 2024-0022 (GHSL-2024-115, CVE-2024-47538)
|
|
| Summary |
Stack buffer-overflow in Vorbis decoder |
| Date |
2024-12-03 20:00 |
| Affected Versions |
GStreamer gst-plugins-base < 1.24.10 |
| IDs |
GStreamer-SA-2024-0022
GHSL-2024-115
CVE-2024-47538 |
Details
Stack buffer-overflow in Vorbis decoder that can cause crashes
for certain input files.
Impact
It is possible for a malicious third party to trigger stack buffer-overflows that
can result in a crash of the application.
Solution
The gst-plugins-base 1.24.10 release addresses the issue. People using older
branches of GStreamer should apply the patch and recompile.
References
The GStreamer project
CVE Database Entries
GStreamer releases
1.24 (current stable)
Patches
