CVE-2024-47607
GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.
A flaw was found in the GStreamer library. A stack buffer overflow in the Opus decoder can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash.
This update for gstreamer-plugins-base fixes the following issues. Fixed a stack-buffer overflow in vorbis_handle_identification_packet. Fixed a NULL-pointer dereference in LRC subtitle parser. Fixed an out-of-bounds read in gst-discoverer-1.0 commandline tool. Fixed an out-of-bounds write in Ogg demuxer. Fixed an out-of-bounds write in SSA subtitle parser. Fixed an ID3v2 parser out-of-bounds read and NULL-pointer dereference. Fixed a stack buffer-overflow in Opus decoder.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2024-09-27 CVE Reserved
- 2024-12-11 CVE Published
- 2024-12-12 CVE Updated
- 2025-07-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-121: Stack-based Buffer Overflow
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch | X_refsource_misc | |
| https://gstreamer.freedesktop.org/security/sa-2024-0024.html | X_refsource_misc | |
| https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2024-47607 | 2024-12-18 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2331754 | 2024-12-18 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gstreamer Search vendor "Gstreamer" | Gstreamer Search vendor "Gstreamer" for product "Gstreamer" | < 1.24.10 Search vendor "Gstreamer" for product "Gstreamer" and version " < 1.24.10" | en |
Affected
| ||||||