CVE-2024-47538: GHSL-2024-115_GHSL-2024-118: Multiple vulnerabilities in GStreamer, including stack buffer overflows, out-of-bounds write, and null pointer dereference - CVE-2024-47538, CVE-2024-47607, CVE-2024-47615, CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be GSTAUDIOCHANNELPOSITIONNONE. This vulnerability allows someone to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
Other sources
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array The value written will always be GSTAUDIOCHANNELPOSITIONNONE. This vulnerability allows to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47538?
CVE-2024-47538 has been classified as a critical vulnerability due to the potential for stack-buffer overflow.
How do I fix CVE-2024-47538?
To fix CVE-2024-47538, update the GStreamer library to version 1.24.10 or later, or to the specified patched versions in the affected software.
What software is affected by CVE-2024-47538?
CVE-2024-47538 affects GStreamer versions prior to 1.24.10 and specific versions of the gst-plugins-base1.0 package.
What is a stack-buffer overflow as related to CVE-2024-47538?
A stack-buffer overflow in CVE-2024-47538 occurs when the size of the position array exceeds its allocated stack size, posing a risk of code execution.
How can I determine if my system is vulnerable to CVE-2024-47538?
You can determine if your system is vulnerable to CVE-2024-47538 by checking the installed version of GStreamer and comparing it to the affected versions.