AZL-54368 CVE-2024-47541 affecting package gstreamer1-plugins-base 1.20.0-3

🗓️ 12 Dec 2024 02:03:28Reported by GoogleType

osv

osv🔗 osv.dev

OOB write in gst_ssa_parse_remove_override_codes due to misordered braces; fixed in 1.24.10.

Reporter	Title	Published	Views	Family All 127
FreeBSD	gstreamer1-plugins -- multiple vulnerabilities	3 Dec 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	15 Apr 202503:45	–	ibm
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2025-2971)	19 Aug 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2025:7243)	3 Jul 202500:00	–	nessus
Tenable Nessus	Debian dla-3999 : gir1.2-gst-plugins-base-1.0 - security update	21 Dec 202400:00	–	nessus
Tenable Nessus	Debian dsa-5831 : gir1.2-gst-plugins-base-1.0 - security update	14 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 41 : mingw-directxmath / mingw-gstreamer1 / etc (2024-0a5722a980)	22 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 40 : mingw-directxmath / mingw-gstreamer1 / etc (2024-2284729772)	22 Dec 202400:00	–	nessus
Tenable Nessus	FreeBSD : gstreamer1-plugins -- multiple vulnerabilities (7256fae8-b3e8-11ef-b680-4ccc6adda413)	7 Dec 202400:00	–	nessus
Tenable Nessus	GLSA-202506-02 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	25 Jun 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-47541

21 Apr 2026 04:35Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.17.5

EPSS0.00241

vulnerability oob write ssa parse gstreamer plugins base memory corruption fixed version