{"cves":[{"id":"CVE-2024-47776","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:42:55.897381+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read has been discovered in gst_wavparse_cue_chunk\nwithin gstwavparse.c. The vulnerability happens due to a discrepancy\nbetween the size of the data buffer and the size value provided to the\nfunction. This mismatch causes the comparison  if (size < 4 + ncues * 24)\nto fail in some cases, allowing the subsequent loop to access beyond the\nbounds of the data buffer. The root cause of this discrepancy stems from a\nmiscalculation when clipping the chunk size based on upstream data size.\nThis vulnerability allows reading beyond the bounds of the data buffer,\npotentially leading to a crash (denial of service) or the leak of sensitive\ndata. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47775"}],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47776","https://gstreamer.freedesktop.org/security/sa-2024-0027.html","https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886","https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c627f3a28bc792580f9a9ebcbb309b2256e4a895","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f5fa594695e5a9b347e88719b487d9779f80926a","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8911020ae3da65b224dd1c87de3437a532e9efa4","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8f04506d7e68a653c8d7c5e2fb0a19ef93c6ea35","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3d2a5841d777dd95afdea30ad134f96c876f84ab","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/34cfd6b82c3ae6772b9b43b3f6243f85cea35c38","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ba8476d3448eeaf016345ae0697b8447c0f62636"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47775","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:43:20.483333+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read vulnerability has been found in the parse_ds64\nfunction within gstwavparse.c. The parse_ds64 function does not check that\nthe buffer buf contains sufficient data before attempting to read from it,\ndoing multiple GST_READ_UINT32_LE operations without performing boundary\nchecks. This can lead to an OOB-read when buf is smaller than expected.\nThis vulnerability allows reading beyond the bounds of the data buffer,\npotentially leading to a crash (denial of service) or the leak of sensitive\ndata. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47775","https://gstreamer.freedesktop.org/security/sa-2024-0027.html","https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886","https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c627f3a28bc792580f9a9ebcbb309b2256e4a895","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f5fa594695e5a9b347e88719b487d9779f80926a","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8911020ae3da65b224dd1c87de3437a532e9efa4","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8f04506d7e68a653c8d7c5e2fb0a19ef93c6ea35","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3d2a5841d777dd95afdea30ad134f96c876f84ab","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/34cfd6b82c3ae6772b9b43b3f6243f85cea35c38","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ba8476d3448eeaf016345ae0697b8447c0f62636"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47774","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:44:39.134527+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read vulnerability has been identified in the\ngst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The\nfunction reads the name_length value directly from the input file without\nchecking it properly. Then, the a condition, does not properly handle cases\nwhere name_length is greater than 0xFFFFFFFF - 17, causing an integer\noverflow. In such scenario, the function attempts to access memory beyond\nthe buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47774","https://gstreamer.freedesktop.org/security/sa-2024-0028.html","https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3890","https://github.com/github/securitylab-vulnerabilities/issues/1826"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/98c2175d255bd2459d7645ac6aee50be5cb57fe3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47615","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:42:45.857882+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-Write has been detected in the function\ngst_parse_vorbis_setup_packet within vorbis_parse.c. The integer size is\nread from the input file without proper validation. As a result, size can\nexceed the fixed size of the pad->vorbis_mode_sizes array (which size is\n256). When this happens, the for loop overwrites the entire pad structure\nwith 0s and 1s, affecting adjacent memory as well. This OOB-write can\noverwrite up to 380 bytes of memory beyond the boundaries of the\npad->vorbis_mode_sizes array. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47615","https://gstreamer.freedesktop.org/security/sa-2024-0026.html","https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/","https://ubuntu.com/security/notices/USN-7175-1","https://ubuntu.com/security/notices/USN-7807-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3875"],"patches":{"gst-plugins-base0.10":[],"gst-plugins-base1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8038.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/006047a23a4e4c146e40e5dab765bc6318a94744","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e633ec642825466b91fc12da6629c307906fa206","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/30fa21ac45ef5dad2fef0d98f0e7130c75f0b628","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c94c44ce497d285ebcfe866b9faaae9c66c81132"]},"tags":{},"packages":[{"name":"gst-plugins-base0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-base0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-base0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-base1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-base1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-base1.0","statuses":[{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.1-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.14.5-0ubuntu1~18.04.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"1.8.3-1ubuntu0.3+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7175-1","USN-7807-1"],"notices":[{"id":"USN-7175-1","title":"GStreamer Base Plugins vulnerabilities","summary":"GStreamer Base Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:24:08.708467","description":"Antonio Morales discovered that GStreamer Base Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Base Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-base1.0","version":"1.16.3-0ubuntu1.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"}],"jammy":[{"name":"gst-plugins-base1.0","version":"1.20.1-1ubuntu0.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"}],"noble":[{"name":"gst-plugins-base1.0","version":"1.24.2-1ubuntu0.2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"}],"oracular":[{"name":"gst-plugins-base1.0","version":"1.24.8-1ubuntu0.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47542","CVE-2024-47600","CVE-2024-47541","CVE-2024-47607","CVE-2024-47615","CVE-2024-47835","CVE-2024-47538"]},{"id":"USN-7807-1","title":"GStreamer Base Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Base Plugins.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-10-07T03:19:35.573363","description":"Michael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain integer operations. An attacker could possibly\nuse this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453)\n\nMichael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain memory operations. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2023-37328)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2024-47538)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. (CVE-2024-47541, CVE-2024-47615)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2024-47542, CVE-2024-47607,\nCVE-2024-47835)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2024-47600)","is_hidden":false,"release_packages":{"bionic":[{"name":"gst-plugins-base1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-gl","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-gl1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"gst-plugins-base1.0","version":"1.8.3-1ubuntu0.3+esm2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2024-47607","CVE-2024-47835","CVE-2023-37328","CVE-2024-47541","CVE-2024-47615","CVE-2024-47542","CVE-2023-37327","CVE-2024-47600","CVE-2024-4453","CVE-2024-47538"]}]},{"id":"CVE-2024-47613","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:43:20.483333+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference vulnerability has been identified in\n`gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function\ninvokes `memcpy`, using `out_pix` as the destination address. `out_pix` is\nexpected to point to the frame 0 from the frame structure, which is read\nfrom the input file. However, in certain situations, it can points to a\nNULL frame, causing the subsequent call to `memcpy` to attempt writing to\nthe null address (0x00), leading to a null pointer dereference. This\nvulnerability can result in a Denial of Service (DoS) by triggering a\nsegmentation fault (SEGV). This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47613","https://gstreamer.freedesktop.org/security/sa-2024-0025.html","https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3876"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5106dc94fb9b2d8bd0db547e2c325244b7c1f32c"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47607","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:44:29.503124+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents.  stack-buffer overflow has been detected in the\ngst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is\na stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop\nwill write beyond the boundaries of the pos array. The value written will\nalways be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the\nEIP address allocated in the stack. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47607","https://gstreamer.freedesktop.org/security/sa-2024-0024.html","https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/","https://ubuntu.com/security/notices/USN-7175-1","https://ubuntu.com/security/notices/USN-7807-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3871"],"patches":{"gst-plugins-base0.10":[],"gst-plugins-base1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8037.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2838374d6ee4a0c9c4c4221ac46d5c1688f26e59","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/804eca458fb547942ed70b88c021b996be9228a2"]},"tags":{},"packages":[{"name":"gst-plugins-base0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-base0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-base0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-base1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-base1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-base1.0","statuses":[{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.1-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.14.5-0ubuntu1~18.04.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"1.8.3-1ubuntu0.3+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7175-1","USN-7807-1"],"notices":[{"id":"USN-7175-1","title":"GStreamer Base Plugins vulnerabilities","summary":"GStreamer Base Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:24:08.708467","description":"Antonio Morales discovered that GStreamer Base Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Base Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-base1.0","version":"1.16.3-0ubuntu1.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"}],"jammy":[{"name":"gst-plugins-base1.0","version":"1.20.1-1ubuntu0.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"}],"noble":[{"name":"gst-plugins-base1.0","version":"1.24.2-1ubuntu0.2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"}],"oracular":[{"name":"gst-plugins-base1.0","version":"1.24.8-1ubuntu0.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47542","CVE-2024-47600","CVE-2024-47541","CVE-2024-47607","CVE-2024-47615","CVE-2024-47835","CVE-2024-47538"]},{"id":"USN-7807-1","title":"GStreamer Base Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Base Plugins.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-10-07T03:19:35.573363","description":"Michael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain integer operations. An attacker could possibly\nuse this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453)\n\nMichael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain memory operations. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2023-37328)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2024-47538)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. (CVE-2024-47541, CVE-2024-47615)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2024-47542, CVE-2024-47607,\nCVE-2024-47835)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2024-47600)","is_hidden":false,"release_packages":{"bionic":[{"name":"gst-plugins-base1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-gl","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-gl1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"gst-plugins-base1.0","version":"1.8.3-1ubuntu0.3+esm2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2024-47607","CVE-2024-47835","CVE-2023-37328","CVE-2024-47541","CVE-2024-47615","CVE-2024-47542","CVE-2023-37327","CVE-2024-47600","CVE-2024-4453","CVE-2024-47538"]}]},{"id":"CVE-2024-47606","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:32.172049+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An integer underflow has been detected in the function\nqtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs\ndue to an underflow of the gint size variable, which causes size to hold a\nlarge unintended value when cast to an unsigned integer. This 32-bit\nnegative value is then cast to a 64-bit unsigned integer\n(0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The\nfunction gst_buffer_new_allocate then attempts to allocate memory,\neventually calling _sysmem_new_block. The function _sysmem_new_block adds\nalignment and header size to the (unsigned) size, causing the overflow of\nthe 'slice_size' variable. As a result, only 0x89 bytes are allocated,\ndespite the large input size. When the following memcpy call occurs in\ngst_buffer_fill, the data from the input file will overwrite the content of\nthe GstMapInfo info structure. Finally, during the call to\ngst_memory_unmap, the overwritten memory may cause a function pointer\nhijack, as the mem->allocator->mem_unmap_full function is called with a\ncorrupted pointer. This function pointer overwrite could allow an attacker\nto alter the execution flow of the program, leading to arbitrary code\nexecution. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.6,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47606","https://gstreamer.freedesktop.org/security/sa-2024-0014.html","https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/","https://ubuntu.com/security/notices/USN-7174-1","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3851"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f8e398c46fc074f266edb3f20479c0ca31b52448","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2d7a11f5e6be5c323b2fed8158bc9df37752e495"],"gstreamer0.10":[],"gstreamer1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f1cdc6f24340f6cce4cc7020628002f5c70dd6c7","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/72af11b248b4cb60d3dfe4e9459eec0d20052c9b"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gstreamer0.10","source":"https://ubuntu.com/security/cve?package=gstreamer0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gstreamer0.10","debian":"https://tracker.debian.org/pkg/gstreamer0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]},{"name":"gstreamer1.0","source":"https://ubuntu.com/security/cve?package=gstreamer1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gstreamer1.0","debian":"https://tracker.debian.org/pkg/gstreamer1.0","statuses":[{"release_codename":"resolute","status":"not-affected","description":"1.24.10-2","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.2","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-2","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-2","component":null,"pocket":"security"}]}],"notices_ids":["USN-7174-1","USN-7176-1"],"notices":[{"id":"USN-7174-1","title":"GStreamer vulnerability","summary":"GStreamer could be made to crash or run programs as your login if it opened\na specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:12:08.000003","description":"Antonio Morales discovered that GStreamer incorrectly handled allocating\nmemory for certain buffers. An attacker could use this issue to cause\nGStreamer to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gstreamer1.0","version":"1.16.3-0ubuntu1.2","description":"GStreamer is a streaming media framework","is_source":true},{"name":"gir1.2-gstreamer-1.0","version":"1.16.3-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.16.3-0ubuntu1.2","pocket":"security"},{"name":"gstreamer1.0-doc","version":"1.16.3-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.16.3-0ubuntu1.2","pocket":"security"},{"name":"gstreamer1.0-tools","version":"1.16.3-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.16.3-0ubuntu1.2","pocket":"security"},{"name":"libgstreamer1.0-0","version":"1.16.3-0ubuntu1.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.16.3-0ubuntu1.2","pocket":"security"},{"name":"libgstreamer1.0-dev","version":"1.16.3-0ubuntu1.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.16.3-0ubuntu1.2","pocket":"security"}],"jammy":[{"name":"gstreamer1.0","version":"1.20.3-0ubuntu1.1","description":"GStreamer is a streaming media framework","is_source":true},{"name":"gir1.2-gstreamer-1.0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-tools","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer1.0-0","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.20.3-0ubuntu1.1","pocket":"security"},{"name":"libgstreamer1.0-dev","version":"1.20.3-0ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.20.3-0ubuntu1.1","pocket":"security"}],"noble":[{"name":"gstreamer1.0","version":"1.24.2-1ubuntu0.1","description":"GStreamer is a streaming media framework","is_source":true},{"name":"gir1.2-gstreamer-1.0","version":"1.24.2-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.2-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-tools","version":"1.24.2-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.2-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer1.0-0","version":"1.24.2-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.2-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer1.0-dev","version":"1.24.2-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.2-1ubuntu0.1","pocket":"security"}],"oracular":[{"name":"gstreamer1.0","version":"1.24.8-1ubuntu0.1","description":"GStreamer is a streaming media framework","is_source":true},{"name":"gir1.2-gstreamer-1.0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-tools","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer1.0-dev","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0","version_link":"https://launchpad.net/ubuntu/+source/gstreamer1.0/1.24.8-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47606"]},{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47603","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:13.154756+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference vulnerability has been discovered in\nthe gst_matroska_demux_update_tracks function within matroska-demux.c. The\nvulnerability occurs when the gst_caps_is_equal function is called with\ninvalid caps values. If this happen, then in the function\ngst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null\npointer. Attempting to dereference the size field of this null pointer\nresults in a null pointer dereference. This vulnerability is fixed in\n1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47540"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47603","https://gstreamer.freedesktop.org/security/sa-2024-0021.html","https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3863"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/a16851ebf34a9f9be4285b2c0d75fe7844354efe","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/816a970a042c96669da25b7a046f0ab8311a78d9","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eec4043430d30956ad4aea02a7b67a5758d99f11","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2dcb071d4995032ed9242bb863189939b211f5cc","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e5ffa9c9778454457665c1ee1c5bcc17ed3537ac","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/09803e225de515c8881fd13ed464c23771a4d1a6","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2c9abe111bd9122967784ef2b55c9017dc2682b8"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47602","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:13.154756+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference vulnerability has been discovered in\nthe gst_matroska_demux_add_wvpk_header function within matroska-demux.c.\nThis function does not properly check the validity of the\nstream->codec_priv pointer in the following code. If stream->codec_priv is\nNULL, the call to GST_READ_UINT16_LE will attempt to dereference a null\npointer, leading to a crash of the application. This vulnerability is fixed\nin 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47540"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47602","https://gstreamer.freedesktop.org/security/sa-2024-0019.html","https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3863"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/a16851ebf34a9f9be4285b2c0d75fe7844354efe","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/816a970a042c96669da25b7a046f0ab8311a78d9","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eec4043430d30956ad4aea02a7b67a5758d99f11","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2dcb071d4995032ed9242bb863189939b211f5cc","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e5ffa9c9778454457665c1ee1c5bcc17ed3537ac","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/09803e225de515c8881fd13ed464c23771a4d1a6","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2c9abe111bd9122967784ef2b55c9017dc2682b8"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47601","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:46:29.939023+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference vulnerability has been discovered in\nthe gst_matroska_demux_parse_blockgroup_or_simpleblock function within\nmatroska-demux.c. This function does not properly check the validity of the\nGstBuffer *sub pointer before performing dereferences. As a result, null\npointer dereferences may occur. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47540"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47601","https://gstreamer.freedesktop.org/security/sa-2024-0020.html","https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":[""],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/a16851ebf34a9f9be4285b2c0d75fe7844354efe","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/816a970a042c96669da25b7a046f0ab8311a78d9","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eec4043430d30956ad4aea02a7b67a5758d99f11","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2dcb071d4995032ed9242bb863189939b211f5cc","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/e5ffa9c9778454457665c1ee1c5bcc17ed3537ac","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/09803e225de515c8881fd13ed464c23771a4d1a6","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2c9abe111bd9122967784ef2b55c9017dc2682b8"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47600","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:32.172049+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read vulnerability has been detected in the\nformat_channel_mask function in gst-discoverer.c. The vulnerability affects\nthe local array position, which is defined with a fixed size of 64\nelements. However, the function gst_discoverer_audio_info_get_channels may\nreturn a guint channels value greater than 64. This causes the for loop to\nattempt access beyond the bounds of the position array, resulting in an\nOOB-read when an index greater than 63 is used. This vulnerability can\nresult in reading unintended bytes from the stack. Additionally, the\ndereference of value->value_nick after the OOB-read can lead to further\nmemory corruption or undefined behavior. This vulnerability is fixed in\n1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47600","https://gstreamer.freedesktop.org/security/sa-2024-0018.html","https://securitylab.github.com/advisories/GHSL-2024-248_Gstreamer/","https://ubuntu.com/security/notices/USN-7175-1","https://ubuntu.com/security/notices/USN-7807-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3864"],"patches":{"gst-plugins-base0.10":[],"gst-plugins-base1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8034.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/aa07d94c10d71fac389dbbb264a59c1f6117eead","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5b205225e2c6a19ddcace350fdc18a0edf87bcb5"]},"tags":{},"packages":[{"name":"gst-plugins-base0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-base0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-base0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-base1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-base1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-base1.0","statuses":[{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.1-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.14.5-0ubuntu1~18.04.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7175-1","USN-7807-1"],"notices":[{"id":"USN-7175-1","title":"GStreamer Base Plugins vulnerabilities","summary":"GStreamer Base Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:24:08.708467","description":"Antonio Morales discovered that GStreamer Base Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Base Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-base1.0","version":"1.16.3-0ubuntu1.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"}],"jammy":[{"name":"gst-plugins-base1.0","version":"1.20.1-1ubuntu0.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"}],"noble":[{"name":"gst-plugins-base1.0","version":"1.24.2-1ubuntu0.2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"}],"oracular":[{"name":"gst-plugins-base1.0","version":"1.24.8-1ubuntu0.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47542","CVE-2024-47600","CVE-2024-47541","CVE-2024-47607","CVE-2024-47615","CVE-2024-47835","CVE-2024-47538"]},{"id":"USN-7807-1","title":"GStreamer Base Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Base Plugins.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-10-07T03:19:35.573363","description":"Michael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain integer operations. An attacker could possibly\nuse this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453)\n\nMichael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain memory operations. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2023-37328)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2024-47538)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. (CVE-2024-47541, CVE-2024-47615)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2024-47542, CVE-2024-47607,\nCVE-2024-47835)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2024-47600)","is_hidden":false,"release_packages":{"bionic":[{"name":"gst-plugins-base1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-gl","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-gl1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"gst-plugins-base1.0","version":"1.8.3-1ubuntu0.3+esm2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2024-47607","CVE-2024-47835","CVE-2023-37328","CVE-2024-47541","CVE-2024-47615","CVE-2024-47542","CVE-2023-37327","CVE-2024-47600","CVE-2024-4453","CVE-2024-47538"]}]},{"id":"CVE-2024-47599","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:13.154756+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference vulnerability has been discovered in\nthe gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not\ncheck for a NULL return value from gst_video_decoder_set_output_state. When\nthis happens, dereferences of the outstate pointer will lead to a null\npointer dereference. This vulnerability can result in a Denial of Service\n(DoS) by triggering a segmentation fault (SEGV). This vulnerability is\nfixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47599","https://gstreamer.freedesktop.org/security/sa-2024-0016.html","https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3862"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8b1c866e93749fd42d1908ec77a4f339343acbb2"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47598","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:44:29.503124+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read vulnerability has been discovered in the\nqtdemux_merge_sample_table function within qtdemux.c. The problem is that\nthe size of the stts buffer isn’t properly checked before reading\nstts_duration, allowing the program to read 4 bytes beyond the boundaries\nof stts->data. This vulnerability reads up to 4 bytes past the allocated\nbounds of the stts array. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47598","https://gstreamer.freedesktop.org/security/sa-2024-0006.html","https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47597","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:46:21.230737+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read has been detected in the function\nqtdemux_parse_samples within qtdemux.c. This issue arises when the function\nqtdemux_parse_samples reads data beyond the boundaries of the stream->stco\nbuffer. The following code snippet shows the call to\nqt_atom_parser_get_offset_unchecked, which leads to the OOB-read when\nparsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to\nread up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47597","https://gstreamer.freedesktop.org/security/sa-2024-0012.html","https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47596","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:47:54.321561+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read has been discovered in the\nqtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_\ncase, seqh_size is read from the input file without proper validation. If\nseqh_size is greater than the remaining size of the data buffer, it can\nlead to an OOB-read in the following call to gst_buffer_fill, which\ninternally uses memcpy. This vulnerability can result in reading up to 4GB\nof process memory or potentially causing a segmentation fault (SEGV) when\naccessing invalid memory. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47596","https://gstreamer.freedesktop.org/security/sa-2024-0015.html","https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47546","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:00.869774+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An integer underflow has been detected in extract_cc_from_data\nfunction within qtdemux.c. In the FOURCC_c708 case, the subtraction\natom_length - 8 may result in an underflow if atom_length is less than 8.\nWhen that subtraction underflows, *cclen ends up being a large number, and\nthen cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read.\nThis vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47546","https://gstreamer.freedesktop.org/security/sa-2024-0013.html","https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47545","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:42:55.897381+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An integer underflow has been detected in qtdemux_parse_trak\nfunction within qtdemux.c. During the strf parsing case, the subtraction\nsize -= 40 can lead to a negative integer overflow if it is less than 40.\nIf this happens, the subsequent call to gst_buffer_fill will invoke memcpy\nwith a large tocopy size, resulting in an OOB-read. This vulnerability is\nfixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47545","https://gstreamer.freedesktop.org/security/sa-2024-0010.html","https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47544","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:43:31.177907+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. The function qtdemux_parse_sbgp in qtdemux.c is affected by a\nnull dereference vulnerability. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47544","https://gstreamer.freedesktop.org/security/sa-2024-0011.html","https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47543","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:45:23.162671+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. An OOB-read vulnerability has been discovered in\nqtdemux_parse_container function within qtdemux.c. In the parent function\nqtdemux_parse_node, the value of length is not well checked. So, if length\nis big enough, it causes the pointer end to point beyond the boundaries of\nbuffer. Subsequently, in the qtdemux_parse_container function, the while\nloop can trigger an OOB-read, accessing memory beyond the bounds of buf.\nThis vulnerability can result in reading up to 4GB of process memory or\npotentially causing a segmentation fault (SEGV) when accessing invalid\nmemory. This vulnerability is fixed in 1.24.10.","ubuntu_description":"","notes":[{"author":"mdeslaur","note":"same commits as listed in CVE-2024-47537"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.1,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47543","https://gstreamer.freedesktop.org/security/sa-2024-0009.html","https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/","https://ubuntu.com/security/notices/USN-7176-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839"],"patches":{"gst-plugins-good0.10":[],"gst-plugins-good1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8e884e4e31649a9fc19095d6501a1143b074aba8","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7f8f280555201f51898727919831259e68271868","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/83056792a8bd179d7e4ba4b3d234ab75205e47d2","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f31dbbc1bcc00096ab863ee6aaecad493c71c333","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8603e78a07a307139fd45ee11e7623de01494bf3"]},"tags":{},"packages":[{"name":"gst-plugins-good0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-good0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-good0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-good1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-good1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-good1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-good1.0","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.3-0ubuntu1.3","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu1.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1ubuntu1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7176-1"],"notices":[{"id":"USN-7176-1","title":"GStreamer Good Plugins vulnerabilities","summary":"GStreamer Good Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:29:45.910993","description":"Antonio Morales discovered that GStreamer Good Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Good Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-good1.0","version":"1.16.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good-doc","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.16.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.16.3-0ubuntu1.3","pocket":"security"}],"jammy":[{"name":"gst-plugins-good1.0","version":"1.20.3-0ubuntu1.3","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.20.3-0ubuntu1.3","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.20.3-0ubuntu1.3","pocket":"security"}],"noble":[{"name":"gst-plugins-good1.0","version":"1.24.2-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.2-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.2-1ubuntu1.1","pocket":"security"}],"oracular":[{"name":"gst-plugins-good1.0","version":"1.24.8-1ubuntu1.1","description":"GStreamer plugins","is_source":true},{"name":"gstreamer1.0-gtk3","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-plugins-good","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-pulseaudio","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt5","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"gstreamer1.0-qt6","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-0","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"},{"name":"libgstreamer-plugins-good1.0-dev","version":"1.24.8-1ubuntu1.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.24.8-1ubuntu1.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47537","CVE-2024-47776","CVE-2024-47834","CVE-2024-47545","CVE-2024-47596","CVE-2024-47546","CVE-2024-47603","CVE-2024-47774","CVE-2024-47778","CVE-2024-47540","CVE-2024-47775","CVE-2024-47601","CVE-2024-47543","CVE-2024-47777","CVE-2024-47602","CVE-2024-47544","CVE-2024-47597","CVE-2024-47598","CVE-2024-47599","CVE-2024-47613","CVE-2024-47606","CVE-2024-47539"]}]},{"id":"CVE-2024-47542","published":"2024-12-12T00:00:00","updated_at":"2026-08-17T18:47:26.750440+00:00","description":"\nGStreamer is a library for constructing graphs of media-handling\ncomponents. A null pointer dereference has been discovered in the\nid3v2_read_synch_uint function, located in id3v2.c. If\nid3v2_read_synch_uint is called with a null work->hdr.frame_data, the\npointer guint8 *data is accessed without validation, resulting in a null\npointer dereference. This vulnerability can result in a Denial of Service\n(DoS) by triggering a segmentation fault (SEGV). This vulnerability is\nfixed in 1.24.10.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2024-47542","https://gstreamer.freedesktop.org/security/sa-2024-0008.html","https://securitylab.github.com/advisories/GHSL-2024-235_Gstreamer/","https://ubuntu.com/security/notices/USN-7175-1","https://ubuntu.com/security/notices/USN-7807-1"],"bugs":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3842"],"patches":{"gst-plugins-base0.10":[],"gst-plugins-base1.0":["upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8033.patch","upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/921d8daa00c329932616dd5d197b601a7e271e79"]},"tags":{},"packages":[{"name":"gst-plugins-base0.10","source":"https://ubuntu.com/security/cve?package=gst-plugins-base0.10","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base0.10","debian":"https://tracker.debian.org/pkg/gst-plugins-base0.10","statuses":[{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"oracular","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"plucky","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"DNE","description":"","component":null,"pocket":"security"}]},{"name":"gst-plugins-base1.0","source":"https://ubuntu.com/security/cve?package=gst-plugins-base1.0","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=gst-plugins-base1.0","debian":"https://tracker.debian.org/pkg/gst-plugins-base1.0","statuses":[{"release_codename":"resolute","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"focal","status":"released","description":"1.16.3-0ubuntu1.4","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"1.20.1-1ubuntu0.4","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.24.2-1ubuntu0.2","component":null,"pocket":"security"},{"release_codename":"oracular","status":"released","description":"1.24.8-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"plucky","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"1.14.5-0ubuntu1~18.04.3+esm1","component":null,"pocket":"esm-infra"},{"release_codename":"xenial","status":"released","description":"1.8.3-1ubuntu0.3+esm2","component":null,"pocket":"esm-infra"},{"release_codename":"questing","status":"not-affected","description":"1.24.10-1","component":null,"pocket":"security"}]}],"notices_ids":["USN-7175-1","USN-7807-1"],"notices":[{"id":"USN-7175-1","title":"GStreamer Base Plugins vulnerabilities","summary":"GStreamer Base Plugins could be made to crash or run programs as your login\nif it opened a specially crafted file.\n","instructions":"In general, a standard system update will make all the necessary changes.\n","references":[],"published":"2024-12-18T13:24:08.708467","description":"Antonio Morales discovered that GStreamer Base Plugins incorrectly handled\ncertain malformed media files. An attacker could use these issues to cause\nGStreamer Base Plugins to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","is_hidden":false,"release_packages":{"focal":[{"name":"gst-plugins-base1.0","version":"1.16.3-0ubuntu1.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.16.3-0ubuntu1.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.16.3-0ubuntu1.4","pocket":"security"}],"jammy":[{"name":"gst-plugins-base1.0","version":"1.20.1-1ubuntu0.4","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.20.1-1ubuntu0.4","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.20.1-1ubuntu0.4","pocket":"security"}],"noble":[{"name":"gst-plugins-base1.0","version":"1.24.2-1ubuntu0.2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.2-1ubuntu0.2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.2-1ubuntu0.2","pocket":"security"}],"oracular":[{"name":"gst-plugins-base1.0","version":"1.24.8-1ubuntu0.1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-alsa","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-gl","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"gstreamer1.0-x","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-gl1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.24.8-1ubuntu0.1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0/1.24.8-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-47542","CVE-2024-47600","CVE-2024-47541","CVE-2024-47607","CVE-2024-47615","CVE-2024-47835","CVE-2024-47538"]},{"id":"USN-7807-1","title":"GStreamer Base Plugins vulnerabilities","summary":"Several security issues were fixed in GStreamer Base Plugins.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2025-10-07T03:19:35.573363","description":"Michael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain integer operations. An attacker could possibly\nuse this issue to execute arbitrary code. (CVE-2023-37327, CVE-2024-4453)\n\nMichael Randrianantenaina discovered that GStreamer Base Plugins did not\ncorrectly handle certain memory operations. An attacker could possibly\nuse this issue to execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2023-37328)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to execute arbitrary code. (CVE-2024-47538)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. (CVE-2024-47541, CVE-2024-47615)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle certain memory operations. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2024-47542, CVE-2024-47607,\nCVE-2024-47835)\n\nAntonio Morales discovered that GStreamer Base Plugins did not correctly\nhandle parsing certain inputs, which could lead to an out-of-bounds access\nvulnerability. An attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected\nUbuntu 18.04 LTS. (CVE-2024-47600)","is_hidden":false,"release_packages":{"bionic":[{"name":"gst-plugins-base1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-gl","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-gl1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.14.5-0ubuntu1~18.04.3+esm1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}],"xenial":[{"name":"gst-plugins-base1.0","version":"1.8.3-1ubuntu0.3+esm2","description":"GStreamer plugins","is_source":true},{"name":"gir1.2-gst-plugins-base-1.0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-alsa","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-apps","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-plugins-base-doc","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"gstreamer1.0-x","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-0","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"},{"name":"libgstreamer-plugins-base1.0-dev","version":"1.8.3-1ubuntu0.3+esm2","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/gst-plugins-base1.0","version_link":null,"pocket":"esm-infra"}]},"type":"USN","cves_ids":["CVE-2024-47607","CVE-2024-47835","CVE-2023-37328","CVE-2024-47541","CVE-2024-47615","CVE-2024-47542","CVE-2023-37327","CVE-2024-47600","CVE-2024-4453","CVE-2024-47538"]}]}],"offset":25520,"limit":20,"total_results":79316}