CVE-2024-47596

Summary

CVE-2024-47596 is a vulnerability affecting GStreamer, a media-handling library. An out-of-bounds (OOB) read issue was found in the qtdemux_parse_svq3_stsd_data function of qtdemux.c. Specifically, in the FOURCC_SMI_ case, the size of seqh_size is read from an input file without validation. If seqh_size exceeds the remaining data buffer size, it causes an OOB-read during the call to gst_buffer_fill. This vulnerability can result in the reading of up to 4GB of process memory or a segmentation fault. A fix for this issue is available in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.