Unrated severityNVD Advisory· Published Dec 11, 2024· Updated Nov 3, 2025
GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header
CVE-2024-47607
Description
GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_parse_header function within `gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If n_channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST_AUDIO_CHANNEL_POSITION_NONE. This bug allows to overwrite the EIP address allocated in the stack. This vulnerability is fixed in 1.24.10.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- gstreamer.freedesktop.org/security/sa-2024-0024.htmlmitrex_refsource_MISC
- securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.