crítica
CVE-2024-47539
gstreamer1-plugins-good: OOB-write in convert_to_s334_1a
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Photon OS. Más baja según Red Hat (alta), AlmaLinux (alta), Oracle (alta), Rocky Linux (alta), Amazon (media), Ubuntu (media).
Descripción
GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 4.0 | gstreamer, gstreamer-devel | 1.25.1-1.ph4 |
| Photon OS 5.0 | gstreamer, gstreamer-devel | 1.25.1-1.ph5 |
| alma 8 | gstreamer1-plugins-good, gstreamer1-plugins-good-gtk | 1.16.1-5.el8_10 |
| alma 9 | gstreamer1-plugins-good, gstreamer1-plugins-good-gtk | 1.22.1-3.el9_5 |
| alpine 3.20 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.21 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.22 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.23 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.24 | gst-plugins-good | 1.24.10-r0 |
| alpine edge | gst-plugins-good | 1.24.10-r0 |
| amazon linux 2 | gstreamer1-plugins-good, gstreamer1-plugins-good-debuginfo, gstreamer1-plugins-good-gtk | 1.18.4-6.amzn2.0.7 |
| debian 11 | gst-plugins-good1.0 | 1.18.4-2+deb11u3 |
Mostrar las 44 entradas de 33 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 4.0 | gstreamer | 1.25.1-1.ph4 |
| Photon OS 4.0 | gstreamer-devel | 1.25.1-1.ph4 |
| Photon OS 5.0 | gstreamer | 1.25.1-1.ph5 |
| Photon OS 5.0 | gstreamer-devel | 1.25.1-1.ph5 |
| alma 8 | gstreamer1-plugins-good | 1.16.1-5.el8_10 |
| alma 8 | gstreamer1-plugins-good-gtk | 1.16.1-5.el8_10 |
| alma 9 | gstreamer1-plugins-good | 1.22.1-3.el9_5 |
| alma 9 | gstreamer1-plugins-good-gtk | 1.22.1-3.el9_5 |
| alpine 3.20 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.21 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.22 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.23 | gst-plugins-good | 1.24.10-r0 |
| alpine 3.24 | gst-plugins-good | 1.24.10-r0 |
| alpine edge | gst-plugins-good | 1.24.10-r0 |
| amazon linux 2 | gstreamer1-plugins-good | 1.18.4-6.amzn2.0.7 |
| amazon linux 2 | gstreamer1-plugins-good-debuginfo | 1.18.4-6.amzn2.0.7 |
| amazon linux 2 | gstreamer1-plugins-good-gtk | 1.18.4-6.amzn2.0.7 |
| debian 11 | gst-plugins-good1.0 | 1.18.4-2+deb11u3 |
| debian 12 | gst-plugins-good1.0 | 1.22.0-5+deb12u2 |
| debian 13 | gst-plugins-good1.0 | 1.24.10-1 |
| debian 14 | gst-plugins-good1.0 | 1.24.10-1 |
| echo | gst-plugins-good1.0 | 1.22.0-5+deb12u2 |
| Oracle Linux 8 | gstreamer1-plugins-good | 1.16.1-5.el8_10 |
| Oracle Linux 8 | gstreamer1-plugins-good-gtk | 1.16.1-5.el8_10 |
| Oracle Linux 9 | gstreamer1-plugins-good | 1.22.1-3.el9_5 |
| Oracle Linux 9 | gstreamer1-plugins-good-gtk | 1.22.1-3.el9_5 |
| rapidfort alpine 3.20 | gstreamer | 1.24.10-r0 |
| rapidfort alpine 3.21 | gstreamer | 1.24.10-r0 |
| rapidfort alpine 3.22 | gstreamer | 1.24.10-r0 |
| rapidfort alpine 3.23 | gstreamer | 1.24.10-r0 |
| rapidfort alpine 3.24 | gstreamer | 1.24.10-r0 |
| rapidfort debian 12 | gst-plugins-good1.0 | 0:1.24.10-1 |
| rapidfort debian 13 | gst-plugins-good1.0 | 0:1.24.10-1 |
| rapidfort Oracle Linux 9 | gstreamer1-plugins-good | 0:1.22.1-3.el9_5 |
| rapidfort Oracle Linux 9 | gstreamer1-plugins-good-gtk | 0:1.22.1-3.el9_5 |
| rocky 8 | gstreamer1-plugins-good | 1.16.1-5.el8_10 |
| rocky 8 | gstreamer1-plugins-good-gtk | 1.16.1-5.el8_10 |
| rocky 9 | gstreamer1-plugins-good | 1.22.1-3.el9_5 |
| rocky 9 | gstreamer1-plugins-good-gtk | 1.22.1-3.el9_5 |
| ubuntu 20.04 | gst-plugins-good1.0 | 1.16.3-0ubuntu1.3 |
| ubuntu 20.04-ESM | gst-plugins-good1.0 | 1.16.3-0ubuntu1.3 |
| ubuntu 22.04 | gst-plugins-good1.0 | 1.20.3-0ubuntu1.3 |
| ubuntu 24.04 | gst-plugins-good1.0 | 1.24.2-1ubuntu1.1 |
| ubuntu 24.10 | gst-plugins-good1.0 | 1.24.8-1ubuntu1.1 |
Referencias
- https://access.redhat.com/errata/RHSA-2024:11122
- https://access.redhat.com/security/cve/CVE-2024-47539
- https://bugzilla.redhat.com/2331719
- https://bugzilla.redhat.com/2331722
- https://bugzilla.redhat.com/2331726
- https://bugzilla.redhat.com/2331753
- https://bugzilla.redhat.com/2331760
- https://bugzilla.redhat.com/show_bug.cgi?id=2331719
Las 29 referencias
- https://bugzilla.redhat.com/show_bug.cgi?id=2331722
- https://bugzilla.redhat.com/show_bug.cgi?id=2331726
- https://bugzilla.redhat.com/show_bug.cgi?id=2331753
- https://bugzilla.redhat.com/show_bug.cgi?id=2331760
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47537
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47539
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47540
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47606
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47613
- https://errata.almalinux.org/9/ALSA-2024-11122.html
- https://errata.rockylinux.org/RLSA-2024:11122
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch
- https://gstreamer.freedesktop.org/security/sa-2024-0007.html
- https://linux.oracle.com/cve/CVE-2024-47539.html
- https://linux.oracle.com/errata/ELSA-2024-11299.html
- https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-47539
- https://securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/
- https://ubuntu.com/security/notices/USN-7176-1
- https://www.cve.org/CVERecord?id=CVE-2024-47539