CVE-2024-54505

creationtimestamp| type| source ---|---|--- 2024-12-12 00:29:11+00:00| seen| https://infosec.exchange/users/cve/statuses/113637022184981140 2024-12-12 03:47:06+00:00| seen| https://t.me/cvedetector/12681 2024-12-12 09:59:39+00:00| seen| https://t.me/RussianOSINT/4978...

CVE-2024-47537

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream-samples to accommodate stream-nsamples + samplescount elements of type QtDemuxSample. The problem is that samplescount is read from the input file. And i...

CVE-2024-47606

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemuxparsetheoraextension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended...

CVE-2024-4109

Rejected reason: Red Hat Product Security has determined that this CVE is not a security vulnerability...

CVE-2024-47599

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstjpegdecnegotiate function in gstjpegdec.c. This function does not check for a NULL return value from gstvideodecodersetoutputstate. When this happens...

CVE-2024-47835

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parselrc function within gstsubparse.c. The parselrc function calls strchr to find the character '' in the string line. The pointer returned by this call ...

CVE-2024-47603

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...

CVE-2024-47600

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the formatchannelmask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the...

CVE-2024-47834

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

CVE-2024-47542

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2readsynchuint function, located in id3v2.c. If id3v2readsynchuint is called with a null work-hdr.framedata, the pointer guint8 data is accessed without validatio...

CVE-2024-50339

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.17, an unauthenticated user can retrieve all the sessions IDs and use them to steal any valid session. Version 10.0.17 contains a patch for this issue...

CVE-2024-44242

creationtimestamp| type| source ---|---|--- 2024-12-11 22:59:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636667892194711 2024-12-12 06:10:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113638362588915366...

CVE-2024-55657

creationtimestamp| type| source ---|---|--- 2024-12-11 22:46:51+00:00| seen| https://infosec.exchange/users/cve/statuses/113636619788953280 2024-12-12 03:46:58+00:00| seen| https://t.me/cvedetector/12673...

CVE-2024-12486

creationtimestamp| type| source ---|---|--- 2024-12-11 20:40:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113636121248132427 2024-12-12 02:56:25+00:00| seen| https://t.me/cvedetector/12649...

CVE-2024-47541

creationtimestamp| type| source ---|---|--- 2024-12-11 19:32:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113635854689772694 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-47540

creationtimestamp| type| source ---|---|--- 2024-12-11 19:17:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113635795690699377 2024-12-17 12:51:51+00:00| seen| https://github.blog/security/vulnerability-research/uncovering-gstreamer-secrets/...

CVE-2024-12479

creationtimestamp| type| source ---|---|--- 2024-12-11 18:42:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113635658899727553 2024-12-12 02:56:39+00:00| seen| https://t.me/cvedetector/12660...

CVE-2024-50339

creationtimestamp| type| source ---|---|--- 2024-12-11 17:51:38+00:00| seen| https://infosec.exchange/users/cve/statuses/113635458929398685...

CVE-2024-48912

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.17, an authenticated user can use an application endpoint to delete any user account. Version 10.0.17 contains a patch for this issue...

CVE-2024-11597

creationtimestamp| type| source ---|---|--- 2024-12-11 16:55:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113635239382878469 2024-12-11 18:35:06+00:00| seen| https://t.me/cvedetector/12647...