The gstreamer1-plugins-base package in Red Hat Enterprise Linux 8.8 Extended Update Support contains multiple memory corruption vulnerabilities: a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538), an out-of-bounds write in the Ogg demuxer (CVE-2024-47615), and a stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607). These vulnerabilities could potentially be exploited to cause crashes or execute arbitrary code. Red Hat has issued an Important security advisory (RHSA-2024:11142) providing updated packages that fix these issues. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.

The vulnerabilities involve stack-buffer overflows and out-of-bounds writes, which can lead to memory corruption. This may allow an attacker to cause denial of service or potentially execute arbitrary code if exploited. The Red Hat advisory rates the security impact as Important, indicating a significant risk if unpatched. No known exploits in the wild have been reported so far.

Red Hat has released updated gstreamer1-plugins-base packages for Red Hat Enterprise Linux 8.8 Extended Update Support that address these vulnerabilities. Users should apply these official security updates promptly. For detailed instructions on applying the update, refer to Red Hat's advisory and article at https://access.redhat.com/errata/RHSA-2024:11142 and https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.