CVE-2024-47539 GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a

🗓️ 11 Dec 2024 18:53:00Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

Out-of-bounds write vulnerability in GStreamer fixed in version 1.24.10 due to memory size discrepancy.

Reporter	Title	Published	Views	Family All 154
FreeBSD	gstreamer1-plugins-good -- multiple vulnerabilities	3 Dec 202400:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : gstreamer1-plugins-good (ALAS-2025-2964)	19 Aug 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0282: gstreamer1-plugins-good (ALINUX3-SA-2024:0282)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2024:11299)	18 Dec 202400:00	–	nessus
Tenable Nessus	Debian dla-4071 : gstreamer1.0-gtk3 - security update	28 Feb 202500:00	–	nessus
Tenable Nessus	Debian dsa-5838 : gstreamer1.0-gtk3 - security update	29 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 41 : mingw-directxmath / mingw-gstreamer1 / etc (2024-0a5722a980)	22 Dec 202400:00	–	nessus
Tenable Nessus	Fedora 40 : mingw-directxmath / mingw-gstreamer1 / etc (2024-2284729772)	22 Dec 202400:00	–	nessus
Tenable Nessus	FreeBSD : gstreamer1-plugins-good -- multiple vulnerabilities (750ab972-b3e8-11ef-b680-4ccc6adda413)	7 Dec 202400:00	–	nessus
Tenable Nessus	GLSA-202506-02 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities	25 Jun 202500:00	–	nessus

Source	Link
gstreamer	www.gstreamer.freedesktop.org/security/sa-2024-0007.html
lists	www.lists.debian.org/debian-lts-announce/2025/02/msg00035.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47539.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-47539
securitylab	www.securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/
gitlab	www.gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch

15 Jul 2026 01:49Current

9.2High risk

Vulners AI Score9.2

CVSS 48.6

EPSS0.00994

cve 2024 47539 gstreamer vulnerability out-of-bounds write memory allocation issue version 1.24.10.