Out-of-Bounds Read Vulnerability in GStreamer Library by Freedesktop

CVE-2024-47778

What is CVE-2024-47778?

The vulnerability in the GStreamer library specifically affects the gst_wavparse_adtl_chunk function found in gstwavparse.c. This flaw occurs due to inadequate size parameter validation, allowing an out-of-bounds (OOB) read that could compromise process memory integrity. Attackers can exploit this vulnerability to read sensitive data, with a risk of accessing up to 4GB of memory, potentially resulting in a segmentation fault (SEGV) if invalid memory locations are accessed. The issue has been addressed in version 1.24.10.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References