GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask
概要
GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_channel_mask function in gst-discoverer.c. The vulnerability affects the local array position, which is defined with a fixed size of 64 elements. However, the function gst_discoverer_audio_info_get_channels may return a guint channels value greater than 64. This causes the for loop to attempt access beyond the bounds of the position array, resulting in an OOB-read when an index greater than 63 is used. This vulnerability can result in reading unintended bytes from the stack. Additionally, the dereference of value->value_nick after the OOB-read can lead to further memory corruption or undefined behavior. This vulnerability is fixed in 1.24.10.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2024-47600 gst-plugins-base 修正版: 1.24.10-r0
- Debian DEBIAN-CVE-2024-47600 gst-plugins-base1.0 修正版: 1.18.4-2+deb11u3
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch gitlab.freedesktop.org
- web gstreamer.freedesktop.org
- web lists.debian.org