Vulnerability-Lookup

RHSA-2025:7242

Vulnerability from csaf_redhat - Published: 2025-05-13 08:36 - Updated: 2026-06-30 03:19

Summary

Red Hat Security Advisory: gstreamer1-plugins-good security update

Severity

Moderate

Notes

Topic: An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543) * gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774) * gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777) * gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778) * gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775) * gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596) * gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599) * gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834) * gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776) * gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601) * gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597) * gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546) * gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVE-2024-47602) * gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table (CVE-2024-47598) * gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47603) * gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read (CVE-2024-47545) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-47543

A flaw was found in the GStreamer library. An out-of-bounds read in the MP4/MOV demuxer can lead to crashes for certain input files, potentially allowing a malicious third party to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-47544

A flaw was found in the GStreamer library. Multiple NULL pointer dereferences in the MP4/MOV demuxer's CENC handling can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47545

A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer can lead to out-of-bounds reads that may cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47546

A flaw was found in the GStreamer library. Integer underflow in the MP4/MOV demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47596

A flaw was found in the GStreamer library. An integer underflow due to missing size checks in the MP4/MOV demuxer can lead to out-of-bounds reads and cause crashes for certain input files. This issue can allow a malicious actor to trigger a crash of the application.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47597

A flaw was found in the GStreamer library. Multiple out-of-bounds reads in the MP4/MOV demuxer's sample table parsing and a lack of error checking can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47598

A flaw was found in the GStreamer library. When handling raw audio tracks, out-of-bounds reads in the MP4/MOV demuxer's sample table parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47599

A flaw was found in the GStreamer library. Insufficient error handling in the JPEG decoder can lead to NULL-pointer dereferences and cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47601

A flaw was found in the GStreamer library. A NULL pointer dereference in the Matroska/WebM demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47602

A flaw was found in the GStreamer library. NULL pointer dereferences and out-of-bounds reads in the Matroska/WebM demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47603

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47774

A flaw was found in the GStreamer library. An out-of-bounds read in the gst_avi_subtitle_parse_gab2_chunk function can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47775

A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47776

A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47777

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47778

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

CVE-2024-47834

A flaw was found in the GStreamer library. A use-after-free in the Matroska demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-416 - Use After Free

Affected products

Fixed 31 products, the same list as for CVE-2024-47543

Threats

Impact Moderate

References

125 references

URL	Category
https://access.redhat.com/errata/RHSA-2025:7242	self
https://docs.redhat.com/en/documentation/red_hat_…	external
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331723	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331739	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331741	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331743	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331744	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331747	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331748	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331749	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331750	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331751	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331752	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331755	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331756	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331759	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331761	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331762	external
https://bugzilla.redhat.com/show_bug.cgi?id=2331763	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-47543	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331723	external
https://www.cve.org/CVERecord?id=CVE-2024-47543	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47543	external
https://gitlab.freedesktop.org/gstreamer/gstreame…	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47544	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331751	external
https://www.cve.org/CVERecord?id=CVE-2024-47544	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47544	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47545	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331763	external
https://www.cve.org/CVERecord?id=CVE-2024-47545	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47545	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47546	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331756	external
https://www.cve.org/CVERecord?id=CVE-2024-47546	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47546	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47596	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331747	external
https://www.cve.org/CVERecord?id=CVE-2024-47596	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47596	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47597	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331755	external
https://www.cve.org/CVERecord?id=CVE-2024-47597	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47597	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47598	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331761	external
https://www.cve.org/CVERecord?id=CVE-2024-47598	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47598	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47599	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331748	external
https://www.cve.org/CVERecord?id=CVE-2024-47599	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47599	external
https://gitlab.freedesktop.org/gstreamer/gstreame…	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47601	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331752	external
https://www.cve.org/CVERecord?id=CVE-2024-47601	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47601	external
https://gitlab.freedesktop.org/gstreamer/gstreame…	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47602	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331759	external
https://www.cve.org/CVERecord?id=CVE-2024-47602	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47602	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47603	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331762	external
https://www.cve.org/CVERecord?id=CVE-2024-47603	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47603	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47774	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331739	external
https://www.cve.org/CVERecord?id=CVE-2024-47774	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47774	external
https://github.com/github/securitylab-vulnerabili…	external
https://gitlab.freedesktop.org/gstreamer/gstreame…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47775	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331744	external
https://www.cve.org/CVERecord?id=CVE-2024-47775	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47775	external
https://gitlab.freedesktop.org/gstreamer/gstreame…	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47776	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331750	external
https://www.cve.org/CVERecord?id=CVE-2024-47776	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47776	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47777	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331741	external
https://www.cve.org/CVERecord?id=CVE-2024-47777	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47777	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47778	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331743	external
https://www.cve.org/CVERecord?id=CVE-2024-47778	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47778	external
https://securitylab.github.com/advisories/GHSL-20…	external
https://access.redhat.com/security/cve/CVE-2024-47834	self
https://bugzilla.redhat.com/show_bug.cgi?id=2331749	external
https://www.cve.org/CVERecord?id=CVE-2024-47834	external
https://nvd.nist.gov/vuln/detail/CVE-2024-47834	external
https://gstreamer.freedesktop.org/security/sa-202…	external
https://securitylab.github.com/advisories/GHSL-20…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license.\n\nSecurity Fix(es):\n\n* gstreamer1-plugins-good: OOB-read in qtdemux_parse_container (CVE-2024-47543)\n\n* gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk (CVE-2024-47774)\n\n* gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk (CVE-2024-47777)\n\n* gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk (CVE-2024-47778)\n\n* gstreamer1-plugins-good: OOB-read in parse_ds64 (CVE-2024-47775)\n\n* gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing (CVE-2024-47596)\n\n* gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences (CVE-2024-47599)\n\n* gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate (CVE-2024-47834)\n\n* gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk (CVE-2024-47776)\n\n* gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling (CVE-2024-47544)\n\n* gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47601)\n\n* gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples (CVE-2024-47597)\n\n* gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read (CVE-2024-47546)\n\n* gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer (CVE-2024-47602)\n\n* gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table (CVE-2024-47598)\n\n* gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer (CVE-2024-47603)\n\n* gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read (CVE-2024-47545)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2025:7242",
        "url": "https://access.redhat.com/errata/RHSA-2025:7242"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "2331723",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331723"
      },
      {
        "category": "external",
        "summary": "2331739",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331739"
      },
      {
        "category": "external",
        "summary": "2331741",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331741"
      },
      {
        "category": "external",
        "summary": "2331743",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331743"
      },
      {
        "category": "external",
        "summary": "2331744",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331744"
      },
      {
        "category": "external",
        "summary": "2331747",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331747"
      },
      {
        "category": "external",
        "summary": "2331748",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331748"
      },
      {
        "category": "external",
        "summary": "2331749",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331749"
      },
      {
        "category": "external",
        "summary": "2331750",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331750"
      },
      {
        "category": "external",
        "summary": "2331751",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331751"
      },
      {
        "category": "external",
        "summary": "2331752",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331752"
      },
      {
        "category": "external",
        "summary": "2331755",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331755"
      },
      {
        "category": "external",
        "summary": "2331756",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331756"
      },
      {
        "category": "external",
        "summary": "2331759",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331759"
      },
      {
        "category": "external",
        "summary": "2331761",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331761"
      },
      {
        "category": "external",
        "summary": "2331762",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331762"
      },
      {
        "category": "external",
        "summary": "2331763",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331763"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7242.json"
      }
    ],
    "title": "Red Hat Security Advisory: gstreamer1-plugins-good security update",
    "tracking": {
      "current_release_date": "2026-06-30T03:19:17+00:00",
      "generator": {
        "date": "2026-06-30T03:19:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2025:7242",
      "initial_release_date": "2025-05-13T08:36:31+00:00",
      "revision_history": [
        {
          "date": "2025-05-13T08:36:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-05-13T08:36:31+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T03:19:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.6.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.src",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.src",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.22.12-4.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.22.12-4.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.12-4.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.22.12-4.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-4.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-4.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.22.12-4.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.22.12-4.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.12-4.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.22.12-4.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-4.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.22.12-4.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.22.12-4.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.12-4.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.22.12-4.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-4.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good@1.22.12-4.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk@1.22.12-4.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debugsource@1.22.12-4.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-debuginfo@1.22.12-4.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-gtk-debuginfo@1.22.12-4.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
                "product": {
                  "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_id": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gstreamer1-plugins-good-qt-debuginfo@1.22.12-4.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.src",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        },
        "product_reference": "gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-47543",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T19:01:06.518071+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331723"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. An out-of-bounds read in the MP4/MOV demuxer can lead to crashes for certain input files, potentially allowing a malicious third party to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in qtdemux_parse_container",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47543"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331723",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331723"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47543",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47543"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47543",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47543"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0009.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0009.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T18:55:50.210000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in qtdemux_parse_container"
    },
    {
      "cve": "CVE-2024-47544",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2024-12-11T20:01:47.895968+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331751"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Multiple NULL pointer dereferences in the MP4/MOV demuxer\u0027s CENC handling can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47544"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331751",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331751"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47544",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47544"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47544",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47544"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0011.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0011.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T18:57:31.268000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: NULL-pointer dereferences in MP4/MOV demuxer CENC handling"
    },
    {
      "cve": "CVE-2024-47545",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2024-12-11T20:02:36.295237+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331763"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. An integer overflow in the MP4/MOV demuxer can lead to out-of-bounds reads that may cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47545"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331763",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331763"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47545",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47545"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47545",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47545"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0010.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0010.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T18:58:14.462000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: integer underflow in FOURCC_strf parsing leading to OOB-read"
    },
    {
      "cve": "CVE-2024-47546",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2024-12-11T20:02:09.371312+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Integer underflow in the MP4/MOV demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47546"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47546",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47546"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47546",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47546"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0013.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0013.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:01:05.831000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: integer underflow in extract_cc_from_data leading to OOB-read"
    },
    {
      "cve": "CVE-2024-47596",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:01:30.387932+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331747"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. An integer underflow due to missing size checks in the MP4/MOV demuxer can lead to out-of-bounds reads and cause crashes for certain input files. This issue can allow a malicious actor to trigger a crash of the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47596"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331747",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331747"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47596",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47596"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47596",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47596"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0015.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0015.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:01:23.353000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in FOURCC_SMI_ parsing"
    },
    {
      "cve": "CVE-2024-47597",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:02:05.307914+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331755"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Multiple out-of-bounds reads in the MP4/MOV demuxer\u0027s sample table parsing and a lack of error checking can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47597"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331755",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331755"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47597",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47597"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47597",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47597"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0012.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0012.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:01:50.820000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in qtdemux_parse_samples"
    },
    {
      "cve": "CVE-2024-47598",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:02:28.768219+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331761"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. When handling raw audio tracks, out-of-bounds reads in the MP4/MOV demuxer\u0027s sample table parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47598"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331761",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331761"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47598",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47598"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47598",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47598"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0006.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0006.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:02:32.029000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in qtdemux_merge_sample_table"
    },
    {
      "cve": "CVE-2024-47599",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2024-12-11T20:01:34.696203+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331748"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Insufficient error handling in the JPEG decoder can lead to NULL-pointer dereferences and cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47599"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331748",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331748"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47599",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47599"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47599",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47599"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0016.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0016.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:02:52.412000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences"
    },
    {
      "cve": "CVE-2024-47601",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2024-12-11T20:01:52.496087+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331752"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. A NULL pointer dereference in the Matroska/WebM demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47601"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331752",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331752"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47601",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47601"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47601",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47601"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0020.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0020.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:03:36.650000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer"
    },
    {
      "cve": "CVE-2024-47602",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2024-12-11T20:02:21.573425+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331759"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. NULL pointer dereferences and out-of-bounds reads in the Matroska/WebM demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47602"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331759",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331759"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47602"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47602",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47602"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0019.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0019.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:10:31.683000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer"
    },
    {
      "cve": "CVE-2024-47603",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2024-12-11T20:02:32.664783+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331762"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. A NULL pointer dereference in the Matroska/WebM demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47603"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331762",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331762"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47603"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47603",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47603"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0021.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0021.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:11:51.382000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: NULL-pointer dereference in Matroska/WebM demuxer"
    },
    {
      "cve": "CVE-2024-47774",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:00:59.225323+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331739"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. An out-of-bounds read in the gst_avi_subtitle_parse_gab2_chunk function can cause crashes for certain input files, potentially allowing a malicious third party to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47774"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331739",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331739"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47774",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47774"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47774",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47774"
        },
        {
          "category": "external",
          "summary": "https://github.com/github/securitylab-vulnerabilities/issues/1826",
          "url": "https://github.com/github/securitylab-vulnerabilities/issues/1826"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:15:18.259000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk"
    },
    {
      "cve": "CVE-2024-47775",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:01:18.849608+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331744"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, making it possible for a malicious actor to trigger a crash of the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in parse_ds64",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47775"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331744",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331744"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47775",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47775"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47775",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47775"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:15:44.607000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in parse_ds64"
    },
    {
      "cve": "CVE-2024-47776",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:01:43.508443+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331750"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47776"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331750",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331750"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47776",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47776"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47776",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47776"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:16:04.573000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in gst_wavparse_cue_chunk"
    },
    {
      "cve": "CVE-2024-47777",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:01:07.868488+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47777"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47777",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47777"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47777",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47777"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:16:33.169000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in gst_wavparse_smpl_chunk"
    },
    {
      "cve": "CVE-2024-47778",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-12-11T20:01:15.497737+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331743"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. Various out-of-bounds reads in the WAV parser can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331743",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331743"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47778"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0027.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:16:58.215000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: OOB-read in gst_wavparse_adtl_chunk"
    },
    {
      "cve": "CVE-2024-47834",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2024-12-11T20:01:39.432741+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2331749"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the GStreamer library. A use-after-free in the Matroska demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
          "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-47834"
        },
        {
          "category": "external",
          "summary": "RHBZ#2331749",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2331749"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-47834",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-47834"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-47834",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47834"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "category": "external",
          "summary": "https://gstreamer.freedesktop.org/security/sa-2024-0030.html",
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0030.html"
        },
        {
          "category": "external",
          "summary": "https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/",
          "url": "https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/"
        }
      ],
      "release_date": "2024-12-11T19:18:04.069000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-05-13T08:36:31+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2025:7242"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.src",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-debugsource-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-gtk-debuginfo-0:1.22.12-4.el9.x86_64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.aarch64",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.i686",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.ppc64le",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.s390x",
            "AppStream-9.6.0.GA:gstreamer1-plugins-good-qt-debuginfo-0:1.22.12-4.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gstreamer1-plugins-good: Use-After-Free read in Matroska CodecPrivate"
    }
  ]
}

CVE-2024-47543 (GCVE-0-2024-47543)

Vulnerability from cvelistv5 – Published: 2024-12-11 18:55 – Updated: 2025-11-03 20:39

Title

GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-12 14:29 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47543",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T14:29:43.230153Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T14:30:04.325Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:38.992Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T18:55:50.210Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0009.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0009.html"
        }
      ],
      "source": {
        "advisory": "GHSA-f4cr-4qmv-5fh6",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47543",
    "datePublished": "2024-12-11T18:55:50.210Z",
    "dateReserved": "2024-09-25T21:46:10.931Z",
    "dateUpdated": "2025-11-03T20:39:38.992Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47544 (GCVE-0-2024-47544)

Vulnerability from cvelistv5 – Published: 2024-12-11 18:57 – Updated: 2025-11-03 20:39

Title

GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling

Summary

GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-12 16:37 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47544",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T16:37:30.341361Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T16:37:40.731Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:40.368Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T18:57:31.268Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0011.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0011.html"
        }
      ],
      "source": {
        "advisory": "GHSA-p9cf-r365-qh32",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47544",
    "datePublished": "2024-12-11T18:57:31.268Z",
    "dateReserved": "2024-09-25T21:46:10.931Z",
    "dateUpdated": "2025-11-03T20:39:40.368Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47545 (GCVE-0-2024-47545)

Vulnerability from cvelistv5 – Published: 2024-12-11 18:58 – Updated: 2025-11-03 20:39

Title

GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-13 17:44 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47545",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-13T17:44:03.153452Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-13T17:44:20.236Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:41.770Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T18:58:14.462Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0010.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0010.html"
        }
      ],
      "source": {
        "advisory": "GHSA-gfcr-8wm5-vq57",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47545",
    "datePublished": "2024-12-11T18:58:14.462Z",
    "dateReserved": "2024-09-25T21:46:10.931Z",
    "dateUpdated": "2025-11-03T20:39:41.770Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47546 (GCVE-0-2024-47546)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:01 – Updated: 2025-11-03 20:39

Title

GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-13 17:42 UTC

CWE

CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47546",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-13T17:42:31.315152Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-13T17:42:41.614Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:43.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:01:05.831Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0013.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0013.html"
        }
      ],
      "source": {
        "advisory": "GHSA-8mrc-f6w6-gpph",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47546",
    "datePublished": "2024-12-11T19:01:05.831Z",
    "dateReserved": "2024-09-25T21:46:10.931Z",
    "dateUpdated": "2025-11-03T20:39:43.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47596 (GCVE-0-2024-47596)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:01 – Updated: 2025-11-03 20:39

Title

GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-13 17:41 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47596",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-13T17:41:58.125719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-13T17:42:14.846Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:44.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:01:23.353Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0015.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0015.html"
        }
      ],
      "source": {
        "advisory": "GHSA-g338-pff2-5x8w",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47596",
    "datePublished": "2024-12-11T19:01:23.353Z",
    "dateReserved": "2024-09-27T20:37:22.118Z",
    "dateUpdated": "2025-11-03T20:39:44.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47597 (GCVE-0-2024-47597)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:01 – Updated: 2025-11-03 20:39

Title

GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-11 21:50 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47597",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-11T21:50:51.754656Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-11T21:51:28.160Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:46.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream-\u003estco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:01:50.820Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0012.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0012.html"
        }
      ],
      "source": {
        "advisory": "GHSA-22m6-44pv-4cgj",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47597",
    "datePublished": "2024-12-11T19:01:50.820Z",
    "dateReserved": "2024-09-27T20:37:22.118Z",
    "dateUpdated": "2025-11-03T20:39:46.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47598 (GCVE-0-2024-47598)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:02 – Updated: 2025-11-03 20:39

Title

GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-11 21:40 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47598",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-11T21:40:02.710613Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-11T21:42:50.530Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:47.592Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn\u2019t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts-\u003edata. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:02:32.029Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0006.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0006.html"
        }
      ],
      "source": {
        "advisory": "GHSA-xgf3-8jmm-49hf",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47598",
    "datePublished": "2024-12-11T19:02:32.029Z",
    "dateReserved": "2024-09-27T20:37:22.118Z",
    "dateUpdated": "2025-11-03T20:39:47.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47599 (GCVE-0-2024-47599)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:02 – Updated: 2025-11-03 20:39

Title

GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-11 21:37 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47599",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-11T21:37:52.517866Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-11T21:38:01.666Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:48.976Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:02:52.412Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0016.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0016.html"
        }
      ],
      "source": {
        "advisory": "GHSA-p5ff-v9j8-327r",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47599",
    "datePublished": "2024-12-11T19:02:52.412Z",
    "dateReserved": "2024-09-27T20:37:22.118Z",
    "dateUpdated": "2025-11-03T20:39:48.976Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47601 (GCVE-0-2024-47601)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:03 – Updated: 2025-11-03 20:39

Title

GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-12 14:25 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47601",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T14:25:58.727068Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T14:26:05.938Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:50.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:03:36.650Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0020.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0020.html"
        }
      ],
      "source": {
        "advisory": "GHSA-fgw2-8jw2-ph33",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47601",
    "datePublished": "2024-12-11T19:03:36.650Z",
    "dateReserved": "2024-09-27T20:37:22.119Z",
    "dateUpdated": "2025-11-03T20:39:50.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-47602 (GCVE-0-2024-47602)

Vulnerability from cvelistv5 – Published: 2024-12-11 19:10 – Updated: 2025-11-03 20:39

Title

GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10.

Severity

6.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-12 14:24 UTC

CWE

CWE-476 - NULL Pointer Dereference
CWE-125 - Out-of-bounds Read

Assigner

GitHub_M mitre root

References

4 references

URL	Tags
https://securitylab.github.com/advisories/GHSL-20…	x_refsource_CONFIRM
https://gitlab.freedesktop.org/gstreamer/gstreame…	x_refsource_MISC
https://gstreamer.freedesktop.org/security/sa-202…	x_refsource_MISC
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
gstreamer	gstreamer	Affected: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47602",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-12T14:24:18.356233Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-12T14:24:27.067Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:39:51.745Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00035.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream-\u003ecodec_priv pointer in the following code. If stream-\u003ecodec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:10:31.683Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0019.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0019.html"
        }
      ],
      "source": {
        "advisory": "GHSA-m48f-764w-83c6",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47602",
    "datePublished": "2024-12-11T19:10:31.683Z",
    "dateReserved": "2024-09-27T20:37:22.119Z",
    "dateUpdated": "2025-11-03T20:39:51.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2025:7242

CVE-2024-47543 (GCVE-0-2024-47543)

CVE-2024-47544 (GCVE-0-2024-47544)

CVE-2024-47545 (GCVE-0-2024-47545)

CVE-2024-47546 (GCVE-0-2024-47546)

CVE-2024-47596 (GCVE-0-2024-47596)

CVE-2024-47597 (GCVE-0-2024-47597)

CVE-2024-47598 (GCVE-0-2024-47598)

CVE-2024-47599 (GCVE-0-2024-47599)

CVE-2024-47601 (GCVE-0-2024-47601)

CVE-2024-47602 (GCVE-0-2024-47602)

Tags

Sightings

Nomenclature

Related by attack behaviour