Security Links
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

AFCEA SIGNAL MEDIA

SIGNAL Media delivers award-winning news, analysis and important perspectives to help people understand the complex world of cyber, defense, security, intelligence and related information technology disciplines. With our accurate, unbiased and ethical reporting, we keep stakeholders in-the-know so they may focus on advancing global security.

Highlights

  • Offers news and tips on cutting-edge technology, including AI.
Visit Website
Listed: