CVE-2024-47778

12.12.2024, 02:03

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
GitHub_M	CNA	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 37%

Vendor	Product	Version
gstreamer_project	gstreamer	𝑥 < 1.24.10

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

gst-plugins-good1.0

bullseye	vulnerable
bullseye (security)	1.18.4-2+deb11u3 fixed
bookworm	1.22.0-5+deb12u2 fixed
bookworm (security)	1.22.0-5+deb12u2 fixed
sid	1.26.1-1 fixed
trixie	1.26.1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

gst-plugins-good0.10

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
xenial	needs-triage

gst-plugins-good1.0

plucky	not-affected
oracular	Fixed 1.24.8-1ubuntu1.1 released
noble	Fixed 1.24.2-1ubuntu1.1 released
jammy	Fixed 1.20.3-0ubuntu1.3 released
focal	Fixed 1.16.3-0ubuntu1.3 released
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-125 - Out-of-bounds Read
The software reads data past the end, or before the beginning, of the intended buffer.

References

https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch

https://gstreamer.freedesktop.org/security/sa-2024-0027.html

https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/