Skip to content
OpenAdvisories
High USN-7174-1 1 CVE

gstreamer1.0 vulnerability

Published Dec 18, 2024 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Antonio Morales discovered that GStreamer incorrectly handled allocating
memory for certain buffers. An attacker could use this issue to cause
GStreamer to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gstreamer1.0 1.16.3-0ubuntu1.2
Ubuntu · 22.04 LTS 22.04:LTS gstreamer1.0 1.20.3-0ubuntu1.1
Ubuntu · 24.04 LTS 24.04:LTS gstreamer1.0 1.24.2-1ubuntu0.1

Vulnerabilities 1

  • High 8.6
    CVE-2024-47606

    GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes

    GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which …

    GStreamer GStreamer gst-plugins-good1.0 gst-plugins-good1.0 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2024-47606