Threats tagged 'bit-java-2024-47596'

An out-of-bounds read vulnerability exists in GStreamer's qtdemux component when parsing FOURCC_SMI_ data. The issue arises from improper validation of seqh_size, which can cause reading beyond the buffer limits, potentially exposing up to 4GB of process memory or causing a segmentation fault. This vulnerability is fixed in version 1.24.10.