Skip to content
Commit 6708631c authored by Archana Polampalli's avatar Archana Polampalli Committed by Steve Sakoman
Browse files

gstreamer1.0-plugins-base: fix CVE-2024-4453



GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability.
This vulnerability allows remote attackers to execute arbitrary code on affected
installations of GStreamer. Interaction with this library is required to exploit this
vulnerability but attack vectors may vary depending on the implementation. The specific
flaw exists within the parsing of EXIF metadata. The issue results from the lack of
proper validation of user-supplied data, which can result in an integer overflow before
allocating a buffer. An attacker can leverage this vulnerability to execute code in the
context of the current process. . Was ZDI-CAN-23896.

Signed-off-by: default avatarArchana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: default avatarSteve Sakoman <steve@sakoman.com>
parent 4f7fb1cf
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment