CVE-2024-47543

Summary

CVE-2024-47543 is a vulnerability affecting the GStreamer library, specifically the qtdemux component. An out-of-bounds (OOB) read issue was discovered in the qtdemux_parse_container function of qtdemux.c. The problem stems from a failure to adequately check the value of a length parameter in the parent function qtdemux_parse_node. When length is large enough, the pointer end moves beyond the confines of the buffer. As a result, the while loop in qtdemux_parse_container can trigger an OOB-read, potentially accessing up to 4GB of process memory or causing a segmentation fault. This vulnerability has been addressed in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.