Wind River Support Network

HomeDefectsLIN1022-12662
Fixed

LIN1022-12662 : Security Advisory - gstreamer1.0-plugins-base - CVE-2024-47607

Created: Jan 6, 2025    Updated: Jun 10, 2025
Resolved Date: May 28, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.21
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

GStreamer is a library for constructing graphs of media-handling components.  stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.

CREATE(Triage):(User=admin) CVE-2024-47607 (https://nvd.nist.gov/vuln/detail/CVE-2024-47607)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube