GStreamer: GStreamer AV1 Video Parsing Stack-based Buffer Overflow (CVE-2024-0444) #shorts #breaking

CVE

This CVE relates to a stack-based buffer overflow vulnerability in the GStreamer framework, particularly when handling AV1-encoded video files. Discovered four months ago, this flaw arises from inadequate validation of user-supplied data lengths during the parsing of tile list data, which are subsequently copied to a fixed-length stack buffer. This insufficiency allows remote attackers to execute arbitrary code within the context of the application using the GStreamer library. Successful exploitation requires interaction with the vulnerable GStreamer component but can employ various attack vectors depending on specific implementations. Despite being a significant security risk, it is not a zero-day vulnerability.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://www.zerodayinitiative.com/advisories/ZDI-24-567/
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f368d63ecd89e01fd2cf0b1c4def5fc782b2c390