CVE-2024-47538

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position array is a stack-allocated buffer of size 64. If vd->vi.channels exceeds 64, the for loop will write beyond the boundaries of the position array. The value written will always be `GST_AUDIO_CHANNEL_POSITION_NONE`. This vulnerability allows someone to overwrite the EIP address allocated in the stack. Additionally, this bug can overwrite the `GstAudioInfo` info structure. This vulnerability is fixed in 1.24.10.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Dec 12, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-475399.8GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convCVE-2024-47545.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Next4Biz CRM & BPM Software Business PCVE-2024-475409.8GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identifiCVE-2024-475417.5GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_pCVE-2024-475427.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_reaCVE-2024-475437.5GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_CVE-2024-475447.5GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a nCVE-2024-475457.5GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak fuCVE-2024-475467.5GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data CVE-2024-475479.8Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x contains a weak mechanism for its users to change their passwords which leaCVE-2024-475496.1Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP reCVE-2024-47554.8The Google CSE WordPress plugin through 1.0.7 does not sanitise and escape some of its settings, which could allow high privilege users such
CVE-2024-47538: Critical severity, CVSS 9.8 | Vulnix