MGASA-2025-0040

GStreamer has an OOB-write in isomp4/qtdemux.c. (CVE-2024-47537) GStreamer has a stack-buffer overflow in vorbishandleidentificationpacket. (CVE-2024-47538) GStreamer has an OOB-write in converttos3341a. (CVE-2024-47539) GStreamer uses uninitialized stack memory in Matroska/WebM demuxer. (CVE-2024-47540) GStreamer has an out-of-bounds write in SSA subtitle parser. (CVE-2024-47541) GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference. (CVE-2024-47542) GStreamer has an OOB-read in qtdemuxparsecontainer. (CVE-2024-47543) GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling. (CVE-2024-47544) GStreamer has an integer underflow in FOURCCstrf parsing leading to OOB-read. (CVE-2024-47545) GStreamer has an integer underflow in extractccfromdata leading to OOB-read. (CVE-2024-47546) GStreamer has an OOB-read in FOURCCSMI parsing. (CVE-2024-47596) GStreamer has an OOB-read in qtdemuxparsesamples. (CVE-2024-47597) GStreamer has an OOB-read in qtdemuxmergesampletable. (CVE-2024-47598) GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences. (CVE-2024-47599) GStreamer has an OOB-read in formatchannelmask. (CVE-2024-47600) GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer. (CVE-2024-47601) GStreamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer. (CVE-2024-47602) GStreamer NULL-pointer dereference in Matroska/WebM demuxer. (CVE-2024-47603) GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. (CVE-2024-47606) Stack-buffer overflow in gstopusdecparseheader. (CVE-2024-47607) GStreamer has a null pointer dereference in gstgdkpixbufdecflush. (CVE-2024-47613) GStreamer has an out-of-bounds write in Ogg demuxer. (CVE-2024-47615) GStreamer has an OOB-read in gstavisubtitleparsegab2chunk. (CVE-2024-47774) GStreamer has an OOB-read in parseds64. (CVE-2024-47775) GStreamer has a OOB-read in gstwavparsecuechunk. (CVE-2024-47776) GStreamer has an OOB-read in gstwavparsesmplchunk. (CVE-2024-47777) GStreamer has an OOB-read in gstwavparseadtlchunk. (CVE-2024-47778) Gstreamer Use-After-Free read in Matroska CodecPrivate. (CVE-2024-47834) Gstreamer NULL-pointer dereference in LRC subtitle parser. (CVE-2024-47835)