GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from an out-of-bounds read vulnerability found in the qtdemuxmergesampletable function in qtdemux.c. The vulnerability is a result of an...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. A buffer error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an out-of-bounds write vulnerability found in the converttos3341a function in isomp4/qtdemux.c. The vulnerability i...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstmatroskademuxupdatetracks function in matroska-demux.c. The vulnerability is caused ...

PT-2024-10369 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: The issue is related to a null pointer dereference vulnerability in the gst jpeg dec negotiate function. This vulnerability can be exploited by a remote attacker to cause a Denial of Service Do...

PT-2024-10475 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: The issue is related to an integer overflow in the memory reallocation process. The program attempts to reallocate memory to accommodate a certain number of elements, but if the value read from...

PT-2024-10368 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: The issue is related to a null pointer dereference vulnerability in the gst matroska demux add wvpk header function. This vulnerability can be exploited by a remote attacker to cause a denial o...

PT-2024-10365 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: A null pointer dereference vulnerability has been discovered in the gst matroska demux parse blockgroup or simpleblock function within matroska-demux.c. This function does not properly check th...

PT-2024-10373

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description A null pointer dereference has been discovered in the id3v2 read synch uint function, located in id3v2.c. If id3v2 read synch uint is called with a null work-hdr.frame data, the pointer guint8 da...

FreeBSD : gstreamer1-plugins-ogg -- Out-of-bounds write in Ogg demuxer (7b34ddf7-b3e8-11ef-b680-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7b34ddf7-b3e8-11ef-b680-4ccc6adda413 advisory. The GStreamer Security Center reports: An out-of-bounds write in the Ogg demuxer that can cause crashes...

FreeBSD : gstreamer1-plugins-gdkpixbuf -- NULL-pointer dereference (772d8625-b3e8-11ef-b680-4ccc6adda413)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 772d8625-b3e8-11ef-b680-4ccc6adda413 advisory. The GStreamer Security Center reports: A NULL-pointer dereference in the gdk-pixbuf decoder that can...

gstreamer1-plugins-vorbis -- Stack buffer-overflow in Vorbis decoder

The GStreamer Security Center reports: Stack buffer-overflow in Vorbis decoder that can cause crashes for certain input files...

gstreamer1-plugins-opus -- Stack buffer-overflow in Opus decoder

The GStreamer Security Center reports: Stack buffer-overflow in Opus decoder that can cause crashes for certain input files...

gstreamer1-plugins-ogg -- Out-of-bounds write in Ogg demuxer

The GStreamer Security Center reports: An out-of-bounds write in the Ogg demuxer that can cause crashes for certain input files...

gstreamer1-plugins-gdkpixbuf -- NULL-pointer dereference

The GStreamer Security Center reports: A NULL-pointer dereference in the gdk-pixbuf decoder that can cause crashes for certain input files...

gstreamer1-plugins-good -- multiple vulnerabilities

The GStreamer Security Center reports: 20 security bugs. CVE-2024-47537: Integer overflow in MP4/MOV sample table parser leading to out-of-bounds writes CVE-2024-47598: MP4/MOV sample table parser out-of-bounds read CVE-2024-47539: MP4/MOV Closed Caption handling out-of-bounds write CVE-2024-4754...

gstreamer1-plugins-jpeg -- NULL-pointer dereferences in JPEG decoder

The GStreamer Security Center reports: Insufficient error handling in the JPEG decoder that can lead to NULL-pointer dereferences, and that can cause crashes for certain input files...

gstreamer1-plugins -- multiple vulnerabilities

The GStreamer Security Center reports: 3 security bugs. CVE-2024-47542: ID3v2 parser out-of-bounds read and NULL-pointer dereference CVE-2024-47600: Out-of-bounds read in gst-discoverer-1.0 commandline tool CVE-2024-47541: Out-of-bounds write in SSA subtitle parser...

gstreamer1-plugins-base security update

An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...

RLSA-2024:9056 Moderate: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 For more details about the...

gstreamer: EXIF Metadata Parsing Integer Overflow

A flaw was found in the GStreamer library. This flaw allows a remote attacker to send specially crafted content to the victim, allowing for arbitrary code execution within the context of the affected installation's process. The vulnerability is caused by improper parsing of EXIF metadata and a la...