CVE-2024-47600

Summary

CVE-2024-47600 is a vulnerability affecting the GStreamer library's format_channel_mask function in gst-discoverer.c. This issue arises due to the function gst_discoverer_audio_info_get_channels returning a guint channels value larger than the array's fixed size of 64 elements. As a result, the for loop attempts to access memory outside the bounds of the position array, causing an Out-of-Bounds (OOB) read. Subsequent dereferencing of a potentially corrupted value can lead to further memory corruption or undefined behavior. The vulnerability is resolved in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.