AZL-62396 CVE-2024-47600 affecting package gstreamer1 1.20.0-2

🗓️ 12 Dec 2024 02:03:31Reported by GoogleType

osv🔗 osv.dev👁 2 Views

OOB read in format_channel_mask of gst-discoverer.c when channels exceed 64; may read beyond bounds and cause memory issue; fixed in 1.24.10.

Reporter	Title	Published	Views	Family All 123
FreeBSD	gstreamer1-plugins -- multiple vulnerabilities	3 Dec 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	15 Apr 202503:45	–	ibm
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-base (ALAS-2025-2971)	19 Aug 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : gstreamer1-plugins-base (ALSA-2025:7243)	3 Jul 202500:00	–	nessus
Tenable Nessus	Debian dla-3999 : gir1.2-gst-plugins-base-1.0 - security update	21 Dec 202400:00	–	nessus
Tenable Nessus	Debian dsa-5831 : gir1.2-gst-plugins-base-1.0 - security update	14 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 41 : mingw-directxmath / mingw-gstreamer1 / etc (2024-0a5722a980)	22 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 40 : mingw-directxmath / mingw-gstreamer1 / etc (2024-2284729772)	22 Dec 202400:00	–	nessus
Tenable Nessus	FreeBSD : gstreamer1-plugins -- multiple vulnerabilities (7256fae8-b3e8-11ef-b680-4ccc6adda413)	7 Dec 202400:00	–	nessus
Tenable Nessus	GLSA-202506-02 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	25 Jun 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-47600

21 Apr 2026 04:32Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19.1

EPSS0.00377