CVE-2024-47834

Summary

CVE-2024-47834 is a Use-After-Free read vulnerability discovered in GStreamer, a multimedia framework. The issue lies in the processing of CodecPrivate elements in Matroska streams. In the gst_matroska_demux_parse_stream function, memory for a data chunk is allocated using gst_ebml_read_binary, but later, in gst_matroska_track_free, this memory is inadvertently freed. Subsequently, the freed memory is accessed in the caps_serialize function via gst_value_serialize_buffer, leading to a Use-After-Free read scenario. This vulnerability is resolved in version 1.24.10.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.