The Red Hat security advisory RHSA-2024:11123 addresses three vulnerabilities in the gstreamer1-plugins-base package: CVE-2024-47538 (stack-buffer overflow in vorbis_handle_identification_packet), CVE-2024-47607 (stack-buffer overflow in gst_opus_dec_parse_header), and CVE-2024-47615 (out-of-bounds write in the Ogg demuxer). These vulnerabilities could lead to memory corruption issues. The advisory provides updated packages for Red Hat Enterprise Linux 9 across multiple architectures and update support levels. No CVSS scores are provided in the advisory, but the severity is rated as important (high).

Successful exploitation of these vulnerabilities could result in memory corruption such as stack-buffer overflows and out-of-bounds writes, potentially leading to application crashes or arbitrary code execution within the context of the affected media processing components. The advisory does not report known exploits in the wild. The impact is considered high due to the nature of the vulnerabilities affecting core media processing plugins.

Red Hat has released updated gstreamer1-plugins-base packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the security update as detailed in Red Hat advisory RHSA-2024:11123 and the referenced update article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated or required beyond applying the official patches.