PT-2024-9624 · Gstreamer+10 · Gstreamer+10
Antonio Morales
+1
·
Published
2024-10-02
·
Updated
2025-10-07
·
CVE-2024-47607
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GStreamer versions prior to 1.24.10
Description
A stack-buffer overflow has been detected in the
gst opus dec parse header function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If n channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST AUDIO CHANNEL POSITION NONE. This bug allows overwriting the EIP address allocated in the stack.Recommendations
For versions prior to 1.24.10, update to version 1.24.10 to resolve the issue.
As a temporary workaround, consider restricting the value of
n channels to 64 or less to prevent the stack-buffer overflow until a patch is available.
Restrict access to the gst opus dec parse header function to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Gstreamer
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu