CVE-2024-47537

CVE-2024-47537 affects GStreamer, specifically gstreamer1-plugins-good. The issue arises in the isomp4/qtdemux.c path where the program reallocates stream->samples to hold stream->n_samples + samples_count, with samples_count read from input. If samples_count is large, an integer overflow c...

CVE-2024-47537

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream-samples to accommodate stream-nsamples + samplescount elements of type QtDemuxSample. The problem is that samplescount is read from the input file. And i...

CVE-2024-47537 GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream-samples to accommodate stream-nsamples + samplescount elements of type QtDemuxSample. The problem is that samplescount is read from the input file. And i...

PT-2024-10476

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description The issue is related to an out-of-bounds read in the gst wavparse cue chunk function within gstwavparse.c. This occurs due to a discrepancy between the size of the data buffer and the size value...

PT-2024-10372

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10 Description The issue is related to an out-of-bounds OOB read in the qtdemux parse svq3 stsd data function within qtdemux.c. Specifically, in the FOURCC SMI case, seqh size is read from the input file withou...

GStreamer 数字错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. A numeric error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an integer underflow detected in the extractccfromdata function in qtdemux.c. The vulnerability is caused by a...

GStreamer 缓冲区错误漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A buffer error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an out-of-bounds read detected in the qtdemuxparsesamples function in qtdemux.c. The vulnerability is caused by...

PT-2024-10475 · Gstreamer +10 · Gstreamer +10

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: The issue is related to an integer overflow in the memory reallocation process. The program attempts to reallocate memory to accommodate a certain number of elements, but if the value read from...

GStreamer 资源管理错误漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A resource management error vulnerability exists in GStreamer, which stems from the fact that it could lead to post-release reuse under certain circumstances...

GStreamer 缓冲区错误漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from an out-of-bounds read vulnerability found in the parseds64 function in gstwavparse.c. The vulnerability is a result of an out-of-bounds read...

PT-2024-10365 · Gstreamer +7 · Gstreamer +7

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.24.10 Description: A null pointer dereference vulnerability has been discovered in the gst matroska demux parse blockgroup or simpleblock function within matroska-demux.c. This function does not properly check th...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from a stack buffer overflow detected in the vorbishandleidentificationpacket function in gstvorbisdec.c. The vulnerability is caused by the...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference found in the id3v2readsynchuint function in id3v2.c. The vulnerability is caused by the discovery of a null pointe...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstmatroskademuxaddwvpkheader function in matroska-demux.c. The vulnerability is caused...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from a stack buffer overflow detected in the vorbishandleidentificationpacket function in gstvorbisdec.c. The vulnerability is caused by the...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that originates from an out-of-bounds read vulnerability found in gstwavparseadtlchunk in gstwavparse.c...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. A buffer error vulnerability exists in GStreamer versions prior to 1.24.10, which stems from an out-of-bounds write vulnerability found in the converttos3341a function in isomp4/qtdemux.c. The vulnerability i...

GStreamer 缓冲区错误漏洞

GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from an out-of-bounds read vulnerability found in gstwavparsecuechunk in gstwavparse.c...

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstmatroskademuxupdatetracks function in matroska-demux.c. The vulnerability is caused ...

GStreamer 代码问题漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstjpegdecnegotiate function in gstjpegdec.c. The vulnerability is a result of a null pointer...