PT-2026-38838 · Bitnami · Jre

Publicado 2026-05-08 · Atualizado 2026-05-08

OSV

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse ds64 function within gstwavparse.c. The parse ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST READ UINT32 LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.

Identificadores relacionados

BIT-JRE-2024-47775

Produtos afetados

Jre

Referências · 6

• https://gstreamer.freedesktop.org/security/sa-2024-0027.html · Nota
• https://osv.dev/vulnerability/BIT-jre-2024-47775 · Aviso do Fabricante
• https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-47775 · Nota de Segurança
• https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html · Nota
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch · Nota