Логотип exploitDog
bind:CVE-2024-47597
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-47597

Количество 11

Количество 11

ubuntu логотип

CVE-2024-47597

6 месяцев назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
EPSS: Низкий
redhat логотип

CVE-2024-47597

6 месяцев назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 5.1
EPSS: Низкий
nvd логотип

CVE-2024-47597

6 месяцев назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2024-47597

6 месяцев назад

GStreamer is a library for constructing graphs of media-handling compo ...

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2024-11334

9 месяцев назад

Уязвимость функции qtdemux_parse_samples мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.1
EPSS: Низкий
oracle-oval логотип

ELSA-2025-7242

около 1 месяца назад

ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0063-1

5 месяцев назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0067-1

5 месяцев назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0064-1

5 месяцев назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0055-1

5 месяцев назад

Security update for gstreamer-plugins-good

EPSS: Низкий
redos логотип

ROS-20250121-12

5 месяцев назад

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-47597

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2024-47597

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 5.1
0%
Низкий
6 месяцев назад
nvd логотип
CVE-2024-47597

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-47597

GStreamer is a library for constructing graphs of media-handling compo ...

CVSS3: 9.1
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2024-11334

Уязвимость функции qtdemux_parse_samples мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.1
0%
Низкий
9 месяцев назад
oracle-oval логотип
ELSA-2025-7242

ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE)

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2025:0063-1

Security update for gstreamer-plugins-good

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0067-1

Security update for gstreamer-plugins-good

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0064-1

Security update for gstreamer-plugins-good

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0055-1

Security update for gstreamer-plugins-good

5 месяцев назад
redos логотип
ROS-20250121-12

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 9.8
5 месяцев назад

Уязвимостей на страницу