Threats tagged 'bit-java-2024-47606'

An integer underflow vulnerability exists in GStreamer's MP4/MOV demuxer (qtdemux_parse_theora_extension function) that can cause out-of-bounds writes and potential arbitrary code execution. This occurs due to improper handling of a size variable that underflows and is cast to a large unsigned integer, leading to insufficient memory allocation and memory corruption. The vulnerability is fixed in version 1.24.10. Red Hat has released an update for OpenJDK 8u452 on Windows that includes security fixes, but this specific vulnerability is addressed in GStreamer 1.24.10. The Red Hat advisory rates the update's overall security impact as Moderate. No known exploits are reported in the wild.