Количество 11
Количество 11

BDU:2024-11330
Уязвимость функции gst_avi_subtitle_parse_gab2_chunk мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании

CVE-2024-47774
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.

CVE-2024-47774
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.

CVE-2024-47774
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.
CVE-2024-47774
GStreamer is a library for constructing graphs of media-handling compo ...

ROS-20250121-12
Множественные уязвимости gstreamer1-plugins-good
ELSA-2025-7242
ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE)

SUSE-SU-2025:0063-1
Security update for gstreamer-plugins-good

SUSE-SU-2025:0067-1
Security update for gstreamer-plugins-good

SUSE-SU-2025:0064-1
Security update for gstreamer-plugins-good

SUSE-SU-2025:0055-1
Security update for gstreamer-plugins-good
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | BDU:2024-11330 Уязвимость функции gst_avi_subtitle_parse_gab2_chunk мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 9.1 | 0% Низкий | 9 месяцев назад |
![]() | CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10. | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
![]() | CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10. | CVSS3: 5.1 | 0% Низкий | 6 месяцев назад |
![]() | CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10. | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
CVE-2024-47774 GStreamer is a library for constructing graphs of media-handling compo ... | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад | |
![]() | ROS-20250121-12 Множественные уязвимости gstreamer1-plugins-good | CVSS3: 9.8 | 5 месяцев назад | |
ELSA-2025-7242 ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE) | около 1 месяца назад | |||
![]() | SUSE-SU-2025:0063-1 Security update for gstreamer-plugins-good | 5 месяцев назад | ||
![]() | SUSE-SU-2025:0067-1 Security update for gstreamer-plugins-good | 5 месяцев назад | ||
![]() | SUSE-SU-2025:0064-1 Security update for gstreamer-plugins-good | 5 месяцев назад | ||
![]() | SUSE-SU-2025:0055-1 Security update for gstreamer-plugins-good | 5 месяцев назад |
Уязвимостей на страницу