CVE-2024-47607

Summary

CVE-2024-47607 is a stack-buffer overflow vulnerability affecting the GStreamer library. The issue lies in the gst_opus_dec_parse_header function of `gstopusdec.c`. If the number of audio channels (n_channels) exceeds the buffer size of 64, the for loop writes beyond the boundaries of the pos array, overwriting the EIP address in the stack. This vulnerability can be exploited to execute arbitrary code. The latest version, 1.24.10, includes a fix for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.