gstreamer1-plugins-good -- multiple vulnerabilities

2024-12-06 · CVE-2024-47537, CVE-2024-47598, CVE-2024-47539, CVE-2024-47543, CVE-2024-47545, CVE-2024-47544, CVE-2024-47597, CVE-2024-47546, CVE-2024-47606, CVE-2024-47596, CVE-2024-47540, CVE-2024-47602, CVE-2024-47601, CVE-2024-47603, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47835, CVE-2024-47834 · VuXML entry

The GStreamer Security Center reports: 20 security bugs. CVE-2024-47537: Integer overflow in MP4/MOV sample table parser leading to out-of-bounds writes CVE-2024-47598: MP4/MOV sample table parser out-of-bounds read CVE-2024-47539: MP4/MOV Closed Caption handling out-of-bounds write CVE-2024-47543: MP4/MOV demuxer out-of-bounds read CVE-2024-47545: Integer overflow in MP4/MOV demuxer that can result in out-of-bounds …

Affected versions

• gstreamer1-plugins-good < 1.24.10

By system

0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.