Vulnerability Description
GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is responsible for parsing and removing SSA (SubStation Alpha) style override codes, which are enclosed in curly brackets ({}). The issue arises when a closing curly bracket "}" appears before an opening curly bracket "{" in the input string. In this case, memmove() incorrectly duplicates a substring. With each successive loop iteration, the size passed to memmove() becomes progressively larger (strlen(end+1)), leading to a write beyond the allocated memory bounds. This vulnerability is fixed in 1.24.10.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gstreamer | Gstreamer | < 1.24.10 |
Related Weaknesses (CWE)
References
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8036.patchPatch
- https://gstreamer.freedesktop.org/security/sa-2024-0023.htmlPatchRelease Notes
- https://securitylab.github.com/advisories/GHSL-2024-228_GStreamer/ExploitThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/12/msg00021.html
FAQ
What is CVE-2024-47541?
CVE-2024-47541 is a vulnerability with a CVSS score of 7.5 (HIGH). GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c fil...
How severe is CVE-2024-47541?
CVE-2024-47541 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-47541?
Check the references section above for vendor advisories and patch information. Affected products include: Gstreamer Gstreamer.