Use-After-Free Vulnerability in GStreamer Media Handling Library

CVE-2024-47834

What is CVE-2024-47834?

A Use-After-Free read vulnerability has been identified in the GStreamer Media Handling Library affecting the processing of CodecPrivate elements in Matroska streams. Specifically, during the gst_matroska_demux_parse_stream function, memory allocated for a data chunk is improperly freed in the gst_matroska_track_free function. Subsequently, the application erroneously accesses this freed memory in the caps_serialize function via gst_value_serialize_buffer. This flaw presents a significant security concern, as it permits the read access of already deallocated memory, potentially leading to unstable application behavior or exploitation. This vulnerability has been addressed in version 1.24.10.

References