CVE-2024-47546

Summary

CVE-2024-47546 is a vulnerability affecting the GStreamer media library. In the extract_cc_from_data function of qtdemux.c, an integer underflow occurs when atom_length is less than 8. This results in a large value being assigned to *cclen, which is then used in g_memdup2, leading to an out-of-bounds read. The FOURCC_c708 case is specifically affected by this issue, and it has been resolved in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.