Логотип exploitDog
bind:"CVE-2024-47598"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2024-47598"

Количество 11

Количество 11

ubuntu логотип

CVE-2024-47598

около 1 года назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
EPSS: Низкий
redhat логотип

CVE-2024-47598

около 1 года назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 5.1
EPSS: Низкий
nvd логотип

CVE-2024-47598

около 1 года назад

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
EPSS: Низкий
debian логотип

CVE-2024-47598

около 1 года назад

GStreamer is a library for constructing graphs of media-handling compo ...

CVSS3: 9.1
EPSS: Низкий
fstec логотип

BDU:2024-11333

больше 1 года назад

Уязвимость функции qtdemux_merge_sample_table мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.1
EPSS: Низкий
rocky логотип

RLSA-2025:7242

3 месяца назад

Moderate: gstreamer1-plugins-good security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-7242

8 месяцев назад

ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0067-1

около 1 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0064-1

около 1 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0055-1

около 1 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
redos логотип

ROS-20250121-12

12 месяцев назад

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-47598

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
0%
Низкий
около 1 года назад
redhat логотип
CVE-2024-47598

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 5.1
0%
Низкий
около 1 года назад
nvd логотип
CVE-2024-47598

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

CVSS3: 9.1
0%
Низкий
около 1 года назад
debian логотип
CVE-2024-47598

GStreamer is a library for constructing graphs of media-handling compo ...

CVSS3: 9.1
0%
Низкий
около 1 года назад
fstec логотип
BDU:2024-11333

Уязвимость функции qtdemux_merge_sample_table мультимедийного фреймворка Gstreamer, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 9.1
0%
Низкий
больше 1 года назад
rocky логотип
RLSA-2025:7242

Moderate: gstreamer1-plugins-good security update

3 месяца назад
oracle-oval логотип
ELSA-2025-7242

ELSA-2025-7242: gstreamer1-plugins-good security update (MODERATE)

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0067-1

Security update for gstreamer-plugins-good

около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0064-1

Security update for gstreamer-plugins-good

около 1 года назад
suse-cvrf логотип
SUSE-SU-2025:0055-1

Security update for gstreamer-plugins-good

около 1 года назад
redos логотип
ROS-20250121-12

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 9.8
12 месяцев назад

Уязвимостей на страницу