Wind River Support Network

HomeDefectsLIN1022-12655
Fixed

LIN1022-12655 : Security Advisory - gstreamer1.0-plugins-good - CVE-2024-47778

Created: Jan 6, 2025    Updated: Jun 10, 2025
Resolved Date: May 28, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.21
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

CREATE(Triage):(User=admin) CVE-2024-47778 (https://nvd.nist.gov/vuln/detail/CVE-2024-47778)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube