Red Hat Security Advisory: gstreamer1-plugins-base security update
Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These issues could potentially lead to memory corruption. Red Hat has released security updates addressing these vulnerabilities for various architectures and Extended Life Cycle versions of RHEL 8.
AI Analysis
Technical Summary
The gstreamer1-plugins-base package in Red Hat Enterprise Linux 8 contains multiple memory corruption vulnerabilities: a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538), an out-of-bounds write in the Ogg demuxer (CVE-2024-47615), and a stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607). These issues could potentially lead to crashes or code execution if exploited. Red Hat has released updated packages to fix these vulnerabilities as detailed in advisory RHSA-2024:11345. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided in the advisory, but the severity is rated as important (high).
Potential Impact
The vulnerabilities involve stack-buffer overflows and out-of-bounds writes in media processing plugins, which can lead to memory corruption. This may allow an attacker to cause application crashes or potentially execute arbitrary code when processing crafted media files. The impact is significant given the common use of GStreamer for media streaming and processing. However, no known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated gstreamer1-plugins-base packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:11345. Details and instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.
Red Hat Security Advisory: gstreamer1-plugins-base security update
Description
Multiple security vulnerabilities have been identified in the gstreamer1-plugins-base package used in Red Hat Enterprise Linux 8. These include stack-buffer overflows in vorbis_handle_identification_packet (CVE-2024-47538) and gst_opus_dec_parse_header (CVE-2024-47607), as well as an out-of-bounds write in the Ogg demuxer (CVE-2024-47615). These issues could potentially lead to memory corruption. Red Hat has released security updates addressing these vulnerabilities for various architectures and Extended Life Cycle versions of RHEL 8.
Affected software
pkg:rpm/redhat/gstreamer1-plugins-baseRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The gstreamer1-plugins-base package in Red Hat Enterprise Linux 8 contains multiple memory corruption vulnerabilities: a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538), an out-of-bounds write in the Ogg demuxer (CVE-2024-47615), and a stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607). These issues could potentially lead to crashes or code execution if exploited. Red Hat has released updated packages to fix these vulnerabilities as detailed in advisory RHSA-2024:11345. The advisory covers multiple architectures including x86_64, s390x, ppc64le, and aarch64. No CVSS scores are provided in the advisory, but the severity is rated as important (high).
Potential Impact
The vulnerabilities involve stack-buffer overflows and out-of-bounds writes in media processing plugins, which can lead to memory corruption. This may allow an attacker to cause application crashes or potentially execute arbitrary code when processing crafted media files. The impact is significant given the common use of GStreamer for media streaming and processing. However, no known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated gstreamer1-plugins-base packages for Red Hat Enterprise Linux 8 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2024:11345. Details and instructions for applying the update are available at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:11345
- Cve Count
- 3
- Additional Cves
- ["CVE-2024-47607","CVE-2024-47615"]
- Cvss Version
- null
Threat ID: 6a419cc127e9c79719ac0cf1
Added to database: 06/28/2026, 22:14:25 UTC
Last enriched: 06/28/2026, 22:40:41 UTC
Last updated: 07/03/2026, 09:51:10 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.