CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

CVE-2024-47835

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parselrc function within gstsubparse.c. The parselrc function calls strchr to find the character '' in the string line. The pointer returned by this call ...

CVE-2024-47599

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstjpegdecnegotiate function in gstjpegdec.c. This function does not check for a NULL return value from gstvideodecodersetoutputstate. When this happens...

CVE-2024-47603

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...

CVE-2024-47542

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2readsynchuint function, located in id3v2.c. If id3v2readsynchuint is called with a null work-hdr.framedata, the pointer guint8 data is accessed without validatio...

CVE-2024-47834

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

CVE-2024-47600

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the...

CVE-2024-50339

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue...

CVE-2024-44242

creationtimestamp| type| source ---|---|--- 2024-12-11 22:59:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636667892194711 2024-12-12 06:10:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113638362588915366...

CVE-2024-55657

creationtimestamp| type| source ---|---|--- 2024-12-11 22:46:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113636619788953280 2024-12-12 03:46:58+00:00| seen| https://t.me/cvedetector/12673...

CVE-2024-12486

creationtimestamp| type| source ---|---|--- 2024-12-11 20:40:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636121248132427 2024-12-12 02:56:25+00:00| seen| https://t.me/cvedetector/12649...

CVE-2024-47541

creationtimestamp| type| source ---|---|--- 2024-12-11 19:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635854689772694 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-47540

creationtimestamp| type| source ---|---|--- 2024-12-11 19:17:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113635795690699377 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-12479

creationtimestamp| type| source ---|---|--- 2024-12-11 18:42:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113635658899727553 2024-12-12 02:56:39+00:00| seen| https://t.me/cvedetector/12660...

CVE-2024-50339

creationtimestamp| type| source ---|---|--- 2024-12-11 17:51:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113635458929398685...

CVE-2024-48912

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.17, an authenticated user can use an application endpoint to delete any user account. Version 10.0.17 contains a patch for this issue...

CVE-2024-8233

creationtimestamp| type| source ---|---|--- 2024-12-11 16:30:39+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113635140492482846 2024-12-12 13:49:53+00:00| seen| https://t.me/cvedetector/12761...

CVE-2024-28140

creationtimestamp| type| source ---|---|--- 2024-12-11 15:49:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113634979328314715 2024-12-11 17:44:49+00:00| seen| https://t.me/cvedetector/12638...

CVE-2024-12325

creationtimestamp| type| source ---|---|--- 2024-12-11 11:27:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113633947633055212 2024-12-11 14:24:09+00:00| seen| https://t.me/cvedetector/12631 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18...

CVE-2024-11840

creationtimestamp| type| source ---|---|--- 2024-12-11 11:02:04+00:00| seen| https://infosec.exchange/users/cve/statuses/113633848454946185 2024-12-11 12:43:55+00:00| seen| https://t.me/cvedetector/12628...