CVE-2024-47607

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.24.10

Description A stack-buffer overflow has been detected in the gst opus dec parse header function within gstopusdec.c. The pos array is a stack-allocated buffer of size 64. If n channels exceeds 64, the for loop will write beyond the boundaries of the pos array. The value written will always be GST AUDIO CHANNEL POSITION NONE. This bug allows overwriting the EIP address allocated in the stack.

Recommendations For versions prior to 1.24.10, update to version 1.24.10 to resolve the issue. As a temporary workaround, consider restricting the value of n channels to 64 or less to prevent the stack-buffer overflow until a patch is available. Restrict access to the gst opus dec parse header function to minimize the risk of exploitation.