Threats tagged 'bit-jre-2024-47545'

GStreamer, a media-handling library, contains an integer underflow vulnerability in the qtdemux_parse_trak function within qtdemux.c. The flaw occurs during FOURCC strf parsing, where a subtraction operation can cause a negative integer underflow if the size is less than 40. This leads to an out-of-bounds read when memcpy is called with an incorrect size. The vulnerability is fixed in version 1.24.10.