CVE-2024-47546— GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read
Quick assessment
Affected
gstreamer gstreamer
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GStreamer是GStreamer开源的一套用于处理流媒体的框架。 GStreamer 1.24.10之前版本存在数字错误漏洞，该漏洞源于在qtdemux.c中的extract_cc_from_data函数中检测到整数下溢。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-47546
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read
Source: CVE Program / CVE List V5
Vulnerability Description
GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Vulnerability Title
GStreamer 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GStreamer是GStreamer开源的一套用于处理流媒体的框架。 GStreamer 1.24.10之前版本存在数字错误漏洞，该漏洞源于在qtdemux.c中的extract_cc_from_data函数中检测到整数下溢。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-47546
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-47546
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-47546 (2)
-
GStreamer Security Advisory x_refsource_MISC
Same Patch Batch · gstreamer · 2024-12-11 · 29 CVEs total
| CVE-2024-47606 | GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that ca | |
| CVE-2024-47776 | GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk | |
| CVE-2024-47601 | GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer | |
| CVE-2024-47537 | GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c | |
| CVE-2024-47600 | GHSL-2024-248: GStreamer has an OOB-read in format_channel_mask | |
| CVE-2024-47538 | GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packe | |
| CVE-2024-47615 | GHSL-2024-117: GStreamer has an out-of-bounds write in Ogg demuxer | |
| CVE-2024-47834 | GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate | |
| CVE-2024-47541 | GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser | |
| CVE-2024-47539 | GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a | |
| CVE-2024-47607 | GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header | |
| CVE-2024-47775 | GHSL-2024-261: GStreamer has an OOB-read in parse_ds64 | |
| CVE-2024-47596 | GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing | |
| CVE-2024-47835 | GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser | |
| CVE-2024-47599 | GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL | |
| CVE-2024-47540 | GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer | |
| CVE-2024-47597 | GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples | |
| CVE-2024-47778 | GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk | |
| CVE-2024-47598 | GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table | |
| CVE-2024-47603 | GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer |
Showing top 20 of 29 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: gstreamer
-
CVE-2026-18299
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution V -
CVE-2026-18298
GStreamer PNG File Parsing Heap-based Buffer Overflow Remote -
CVE-2026-18297
GStreamer OGG File Parsing Stack-based Buffer Overflow Remot -
CVE-2026-18296
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote -
CVE-2026-18295
GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code E
Same vendor: gstreamer
-
CVE-2026-18299
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution V -
CVE-2026-18298
GStreamer PNG File Parsing Heap-based Buffer Overflow Remote -
CVE-2026-18297
GStreamer OGG File Parsing Stack-based Buffer Overflow Remot -
CVE-2026-18296
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote -
CVE-2026-18295
GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code E
Same weakness: CWE-191
-
CVE-2026-16924
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-58087
Heap out-of-bounds access in semctl(2) -
CVE-2026-62289
libheif: Integer underflow in Fraction constructor via doubl -
CVE-2026-45698
Netatalk has Integer Underflow → Stack Buffer Overflow in de -
CVE-2026-45699
Netatalk has Integer Underflow → Stack Buffer Overflow in co
V. Comments for CVE-2024-47546
No comments yet