CVE-2024-47777

Summary

CVE-2024-47777 is a vulnerability affecting the GStreamer library, which is used for constructing media-handling components. An out-of-bounds (OOB) read issue was discovered in the gst_wavparse_smpl_chunk function located in gstwavparse.c. This function fails to check the size of the data buffer before attempting to read 4 bytes from it, plus an additional 12-byte offset. If the data buffer is too small, the function may read beyond its boundaries, potentially leading to the reading of 4 bytes from unintended memory locations. This vulnerability has been resolved in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.