BIT-java-2024-47544: GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling

Q: What must an attacker provide to trigger the issue?

An attacker would need to cause GStreamer to process MP4/MOV content that reaches the affected qtdemux_parse_sbgp CENC-handling code. The supplied data indicates no privileges are required, but user interaction is required.

Q: What is the expected impact if exploitation succeeds?

The documented impact is loss of availability. The CVSS vector indicates no impact to confidentiality or integrity.

Q: Which fixed version is identified?

The vulnerability is fixed in GStreamer 1.24.10.

Published Dec 11, 2024

Updated

GStreamer is a library for constructing graphs of media-handling components. The function qtdemuxparsesbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

Affected Software

1 affected component

GStreamer GStreamer<1.24.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade GStreamer to a version that resolves this vulnerability.
Fixed in 1.24.10

Event History

Dec 11, 2024

CVE Published

via OSV·06:57 PM

Data Sourced

via OSV·06:57 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What must an attacker provide to trigger the issue?

An attacker would need to cause GStreamer to process MP4/MOV content that reaches the affected qtdemux_parse_sbgp CENC-handling code. The supplied data indicates no privileges are required, but user interaction is required.

What is the expected impact if exploitation succeeds?

The documented impact is loss of availability. The CVSS vector indicates no impact to confidentiality or integrity.

Which fixed version is identified?

The vulnerability is fixed in GStreamer 1.24.10.

BIT-java-2024-47544: GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling

Affected Software

Remediation

Event History

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the expected impact if exploitation succeeds?

Which fixed version is identified?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the expected impact if exploitation succeeds?

Which fixed version is identified?