Summary
Michael Randrianantenaina discovered that GStreamer Base Plugins did not
correctly handle certain integer operations. An attacker could possibly
use this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453)
Michael Randrianantenaina discovered that GStreamer Base Plugins did not
correctly handle certain memory operations. An attacker could possibly
use this issue to execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS. (CVE-2023-37328)
Antonio Morales discovered that GStreamer Base Plugins did not correctly
handle certain memory operations. An attacker could possibly use this
issue to execute arbitrary code. (CVE-2024-47538)
Antonio Morales discovered that GStreamer Base Plugins did not correctly
handle parsing certain inputs, which could lead to an out-of-bounds access
vulnerability. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. (CVE-2024-47541, CVE-2024-47615)
Antonio Morales discovered that GStreamer Base Plugins did not correctly
handle certain memory operations. An attacker could possibly use this
issue to cause a denial of service. (CVE-2024-47542, CVE-2024-47607,
CVE-2024-47835)
Antonio Morales discovered that GStreamer Base Plugins did not correctly
handle parsing certain inputs, which could lead to an out-of-bounds access
vulnerability. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected
Ubuntu 18.04 LTS. (CVE-2024-47600)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gst-plugins-base1.0 | 1.8.3-1ubuntu0.3+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gst-plugins-base1.0 | 1.14.5-0ubuntu1~18.04.3+esm1 |
Vulnerabilities 10
-
High 8.8
GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer PGS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this v…
-
High 8.6
GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet
GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the `vorbis_handle_identification_packet` function within `gstvorbisdec.c`. The position array is a stack-allocated buffer of size 64. If…
-
High 8.6
GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 6…
-
High 8.6
GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer
GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is read from the input file without proper validation. As a resul…
-
High 7.8
GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulner…
-
High 7.6
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability
GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerabil…
-
Medium 6.9
GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser
GStreamer is a library for constructing graphs of media-handling components. An OOB-write vulnerability has been identified in the gst_ssa_parse_remove_override_codes function of the gstssaparse.c file. This function is responsible for parsing and removing SS…
-
Medium 6.8
GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference has been discovered in the id3v2_read_synch_uint function, located in id3v2.c. If id3v2_read_synch_uint is called with a null work->hdr.frame_data, the poi…
-
Medium 6.8
GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the stri…
-
Medium 5.1
GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed…
References
-
report
https://ubuntu.com/security/CVE-2023-37327
-
report
https://ubuntu.com/security/CVE-2023-37328
-
report
https://ubuntu.com/security/CVE-2024-4453
-
report
https://ubuntu.com/security/CVE-2024-47538
-
report
https://ubuntu.com/security/CVE-2024-47541
-
report
https://ubuntu.com/security/CVE-2024-47542
-
report
https://ubuntu.com/security/CVE-2024-47600
-
report
https://ubuntu.com/security/CVE-2024-47607
-
report
https://ubuntu.com/security/CVE-2024-47615
-
report
https://ubuntu.com/security/CVE-2024-47835