CVE-2024-47544

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 12, 2024

Updated: Dec 18, 2024

CWE ID 476

Summary

CVE-2024-47544 is a null dereference vulnerability affecting the function qtdemux_parse_sbgp in GStreamer's qtdemux.c library. This library is used for constructing graphs of media-handling components. The vulnerability arises due to a null reference in the function, which can result in unintended behavior or system crashes. This issue has been resolved in the latest version 1.24.10 of GStreamer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Gstreamer Project Gstreamer

Affected Vendors

Gstreamer Project

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/y_Dyhn
https://www.cve.org/CVERecord?id=CVE-2024-47544
https://nvd.nist.gov/vuln/detail/CVE-2024-47544

Back to Vulnerability Database