CVE-2024-47597

CVE-2024-47597 is a critical out-of-bounds read vulnerability affecting GStreamer, a media-handling library, specifically within the qtdemux_parse_samples function. This flaw allows an attacker to read up to 8 bytes of data beyond allocated memory boundaries by providing a specially crafted MP4 file. With a CVSS score of 9.1, this vulnerability is considered critical due to its network-based attack vector, low attack complexity, and potential for high impact on confidentiality and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, organizations using GStreamer should upgrade to version 1.24.10 or later to mitigate this risk.