Affected: AlmaLinux:9: gstreamer1-plugins-good, AlmaLinux:9: gstreamer1-plugins-good-gtk

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.

Security Fix(es):

* gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543) * gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774) * gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777) * gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778) * gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775) * gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596) * gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599) * gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834) * gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776) * gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601) * gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597) * gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546) * gstreamer1-plugins-good: NULL-pointer dereference…

Affected: Bitnami: java

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

Affected: openEuler:22.03-LTS-SP4: gstreamer1-plugins-good

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types or processing capabilities can be added simply by installing new plugins. Security Fix(es): (CVE-2024-47537) (CVE-2024-47539) (CVE-2024-47540) (CVE-2024-47543) (CVE-2024-47544) (CVE-2024-47545) (CVE-2024-47546) (CVE-2024-47596) (CVE-2024-47597) (CVE-2024-47599) (CVE-2024-47601) (CVE-2024-47602) (CVE-2024-47603) (CVE-2024-47606) (CVE-2024-47613) (CVE-2024-47774) (CVE-2024-47775) (CVE-2024-47776) (CVE-2024-47777) (CVE-2024-47778) (CVE-2024-47834)

gstreamer1-plugins-good: OOB-read in qtdemux_parse_container gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk gstreamer1-plugins-good: OOB-read in parse_ds64 gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate

Security update for gstreamer-plugins-good

Affected: Ubuntu:16.04:LTS: gst-plugins-good0.10, Ubuntu:Pro:16.04:LTS: gst-plugins-good1.0, Ubuntu:Pro:18.04:LTS: gst-plugins-good1.0, Ubuntu:20.04:LTS: gst-plugins-good1.0, Ubuntu:22.04:LTS: gst-plugins-good1.0, Ubuntu:24.04:LTS: gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GStreamer ausnutzen, um einen Denial of Service Angriff durchzuführen.