Gstreamer · Gstreamer · CVE-2024-47537
**Name of the Vulnerable Software and Affected Versions**
GStreamer versions prior to 1.24.10
**Description**
The issue is related to an integer overflow in the memory reallocation process. The program attempts to reallocate memory to accommodate a certain number of elements, but if the value read from the input file is large enough, it can lead to an integer overflow during the addition. As a consequence, the memory allocation might be significantly smaller than intended, potentially causing an out-of-bounds write when the program iterates through the elements and attempts to write to the allocated memory.
**Recommendations**
For versions prior to 1.24.10, update to version 1.24.10 to resolve the issue. As a temporary workaround, consider restricting the input file size to prevent large values from being read and causing the integer overflow. Additionally, restrict access to the `stream->samples` memory area to minimize the risk of exploitation until the update is applied.