Out-of-Bounds Read Vulnerability in GStreamer Library by Freedesktop

CVE-2024-47778

What is CVE-2024-47778?

The vulnerability in the GStreamer library specifically affects the gst_wavparse_adtl_chunk function found in gstwavparse.c. This flaw occurs due to inadequate size parameter validation, allowing an out-of-bounds (OOB) read that could compromise process memory integrity. Attackers can exploit this vulnerability to read sensitive data, with a risk of accessing up to 4GB of memory, potentially resulting in a segmentation fault (SEGV) if invalid memory locations are accessed. The issue has been addressed in version 1.24.10.

References