GStreamer up to 1.24.9 gstavisubtitle.c gst_avi_subtitle_parse_gab2_chunk name_length out-of-bounds

Summaryinfo

A vulnerability was found in GStreamer up to 1.24.9. It has been rated as problematic. This impacts the function gst_avi_subtitle_parse_gab2_chunk of the file gstavisubtitle.c. The manipulation of the argument name_length leads to out-of-bounds. This vulnerability is referenced as CVE-2024-47774. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in GStreamer up to 1.24.9. It has been rated as problematic. This issue affects the function gst_avi_subtitle_parse_gab2_chunk of the file gstavisubtitle.c. The manipulation of the argument name_length with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is availability. The summary by CVE is:

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.

The advisory is shared at securitylab.github.com. The identification of this vulnerability is CVE-2024-47774 since 09/30/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 213415 (Debian dsa-5838 : gstreamer1.0-gtk3 - security update), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.24.10 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (213415). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Multimedia Processing Software

Name

• GStreamer

Version

• 1.24.0
• 1.24.1
• 1.24.2
• 1.24.3
• 1.24.4
• 1.24.5
• 1.24.6
• 1.24.7
• 1.24.8
• 1.24.9

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion