Out-of-Bounds Read Vulnerability in GStreamer Library

CVE-2024-47777

What is CVE-2024-47777?

An out-of-bounds read vulnerability has been identified in the GStreamer library, specifically within the gst_wavparse_smpl_chunk function of gstwavparse.c. This function attempts to read data from a buffer with an offset, potentially leading to memory leaks or unintended data exposure if the data buffer is inadequately sized. The vulnerability allows for the reading of 4 bytes outside the designated memory bounds, which could be exploited by attackers to access sensitive information or disrupt services. The issue has been addressed in version 1.24.10 and users are advised to update their installations to avoid the risks associated with this vulnerability.

References