Metrics
Affected Vendors & Products
Wed, 18 Dec 2024 20:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gstreamer Project
Gstreamer Project gstreamer |
|
CPEs | cpe:2.3:a:gstreamer_project:gstreamer:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gstreamer Project
Gstreamer Project gstreamer |
|
Metrics |
cvssV3_1
|
cvssV3_1
|
Fri, 13 Dec 2024 01:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
| |
Metrics |
threat_severity
|
cvssV3_1
|
Wed, 11 Dec 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 11 Dec 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the string line. The pointer returned by this call is then passed to g_strdup(). However, if the string line does not contain the character ']', strchr() returns NULL, and a call to g_strdup(start + 1) leads to a null pointer dereference. This vulnerability is fixed in 1.24.10. | |
Title | GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser | |
Weaknesses | CWE-476 | |
References |
| |
Metrics |
cvssV4_0
|
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-12-11T19:17:26.688Z
Updated: 2024-12-11T21:14:10.881Z
Reserved: 2024-10-03T14:06:12.644Z
Link: CVE-2024-47835
Updated: 2024-12-11T21:14:06.807Z
Status : Analyzed
Published: 2024-12-12T02:03:43.163
Modified: 2024-12-18T19:45:03.047
Link: CVE-2024-47835