CVE-2024-47615: GHSL-2024-115_GHSL-2024-118: Multiple vulnerabilities in GStreamer, including stack buffer overflows, out-of-bounds write, and null pointer dereference - CVE-2024-47538, CVE-2024-47607, CVE-2024-47615, CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gstparsevorbissetuppacket within vorbisparse.c. The integer size is read from the input file without proper validation. As a result, size can exceed the fixed size of the pad->vorbismodesizes array (which size is 256). When this happens, the for loop overwrites the entire pad structure with 0s and 1s, affecting adjacent memory as well. This OOB-write can overwrite up to 380 bytes of memory beyond the boundaries of the pad->vorbismodesizes array. This vulnerability is fixed in 1.24.10.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47615?
CVE-2024-47615 is classified as a high severity vulnerability due to the potential for out-of-bounds writes.
How do I fix CVE-2024-47615?
To fix CVE-2024-47615, update GStreamer to version 1.24.10 or later and ensure that gst-plugins-base1.0 is upgraded to at least 1.18.4-2+deb11u3.
Which versions of GStreamer are affected by CVE-2024-47615?
CVE-2024-47615 affects GStreamer versions up to, but not including, 1.24.10.
Are any specific packages vulnerable to CVE-2024-47615?
Yes, the gst-plugins-base1.0 package is vulnerable to CVE-2024-47615 if it is running versions up to 1.18.4-2+deb11u2 and 1.22.0-3+deb12u2.
What type of vulnerability is CVE-2024-47615?
CVE-2024-47615 is an out-of-bounds write vulnerability that occurs in the gst_parse_vorbis_setup_packet function.