CVE-2024-47613: GHSL-2024-115_GHSL-2024-118: Multiple vulnerabilities in GStreamer, including stack buffer overflows, out-of-bounds write, and null pointer dereference - CVE-2024-47538, CVE-2024-47607, CVE-2024-47615, CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to memcpy to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.
Other sources
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be GSTAUDIOCHANNELPOSITIONNONE. This vulnerability allows to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the GstAudioInfo info structure. This vulnerability is fixed in 1.24.10.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47613?
CVE-2024-47613 is classified as a vulnerability that may lead to a null pointer dereference, impacting application stability.
How do I fix CVE-2024-47613?
To fix CVE-2024-47613, upgrade to versions 1.22.0-5+deb12u2 or 1.24.11-5 of the gst-plugins-good1.0 package on Debian.
Which versions of GStreamer are affected by CVE-2024-47613?
GStreamer versions up to 1.24.10 are affected by CVE-2024-47613.
What component of GStreamer does CVE-2024-47613 affect?
CVE-2024-47613 affects the function `gst_gdk_pixbuf_dec_flush` within the GStreamer library.
Can CVE-2024-47613 cause application crashes?
Yes, CVE-2024-47613 can lead to application crashes due to a null pointer dereference during memory operations.