csaf_suse - suse-su-2025:0067-1

Vulnerability from csaf_suse

Published

2025-01-10 16:48

Modified

2025-01-10 16:48

Summary

Security update for gstreamer-plugins-good

Notes

Title of the patch

Security update for gstreamer-plugins-good

Description of the patch

This update for gstreamer-plugins-good fixes the following issues: - CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421) - CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414) - CVE-2024-47539: Fixed an out-of-bounds write in convert_to_s334_1a. (boo#1234417) - CVE-2024-47543: Fixed an out-of-bounds write in qtdemux_parse_container. (boo#1234462) - CVE-2024-47544: Fixed a NULL-pointer dereferences in MP4/MOV demuxer CENC handling. (boo#1234473) - CVE-2024-47545: Fixed an integer underflow in FOURCC_strf parsing leading to out-of-bounds read. (boo#1234476) - CVE-2024-47546: Fixed an integer underflow in extract_cc_from_data leading to out-of-bounds read. (boo#1234477) - CVE-2024-47596: Fixed an integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads. (boo#1234424) - CVE-2024-47597: Fixed an out-of-bounds reads in MP4/MOV demuxer sample table parser (boo#1234425) - CVE-2024-47598: Fixed MP4/MOV sample table parser out-of-bounds read. (boo#1234426) - CVE-2024-47599: Fixed insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences. (boo#1234427) - CVE-2024-47601: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234428) - CVE-2024-47602: Fixed a NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer. (boo#1234432) - CVE-2024-47603: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234433) - CVE-2024-47606: Avoid integer overflow when allocating sysmem. (bsc#1234449) - CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. (boo#1234449) - CVE-2024-47613: Fixed a NULL-pointer dereference in gdk-pixbuf decoder. (boo#1234447) - CVE-2024-47774: Fixed an integer overflow in AVI subtitle parser that leads to out-of-bounds reads. (boo#1234446) - CVE-2024-47775: Fixed various out-of-bounds reads in WAV parser. (boo#1234434) - CVE-2024-47776: Fixed various out-of-bounds reads in WAV parser. (boo#1234435) - CVE-2024-47777: Fixed various out-of-bounds reads in WAV parser. (boo#1234436) - CVE-2024-47778: Fixed various out-of-bounds reads in WAV parser. (boo#1234439) - CVE-2024-47834: Fixed a use-after-free in the Matroska demuxer that can cause crashes for certain input files. (boo#1234440)

Patchnames

SUSE-2025-67,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-67,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLED-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-67,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-67,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-67

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for gstreamer-plugins-good",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for gstreamer-plugins-good fixes the following issues:\n\n- CVE-2024-47530: Fixed an uninitialized stack memory in Matroska/WebM demuxer. (boo#1234421)\n- CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. (boo#1234414)\n- CVE-2024-47539: Fixed an out-of-bounds write in convert_to_s334_1a. (boo#1234417)\n- CVE-2024-47543: Fixed an out-of-bounds write in qtdemux_parse_container. (boo#1234462)\n- CVE-2024-47544: Fixed a NULL-pointer dereferences in MP4/MOV demuxer CENC handling. (boo#1234473)\n- CVE-2024-47545: Fixed an integer underflow in FOURCC_strf parsing leading to out-of-bounds read. (boo#1234476)\n- CVE-2024-47546: Fixed an integer underflow in extract_cc_from_data leading to out-of-bounds read. (boo#1234477)\n- CVE-2024-47596: Fixed an integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads. (boo#1234424)\n- CVE-2024-47597: Fixed an out-of-bounds reads in MP4/MOV demuxer sample table parser (boo#1234425)\n- CVE-2024-47598: Fixed MP4/MOV sample table parser out-of-bounds read. (boo#1234426)\n- CVE-2024-47599: Fixed insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences. (boo#1234427)\n- CVE-2024-47601: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234428)\n- CVE-2024-47602: Fixed a NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer. (boo#1234432)\n- CVE-2024-47603: Fixed a NULL-pointer dereference in Matroska/WebM demuxer. (boo#1234433)\n- CVE-2024-47606: Avoid integer overflow when allocating sysmem. (bsc#1234449)\n- CVE-2024-47606: Fixed an integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes. (boo#1234449)\n- CVE-2024-47613: Fixed a NULL-pointer dereference in gdk-pixbuf decoder. (boo#1234447)\n- CVE-2024-47774: Fixed an integer overflow in AVI subtitle parser that leads to out-of-bounds reads. (boo#1234446)\n- CVE-2024-47775: Fixed various out-of-bounds reads in WAV parser. (boo#1234434)\n- CVE-2024-47776: Fixed various out-of-bounds reads in WAV parser. (boo#1234435)\n- CVE-2024-47777: Fixed various out-of-bounds reads in WAV parser. (boo#1234436)\n- CVE-2024-47778: Fixed various out-of-bounds reads in WAV parser. (boo#1234439)\n- CVE-2024-47834: Fixed a use-after-free in the Matroska demuxer that can cause crashes for certain input files. (boo#1234440)\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2025-67,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-67,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLED-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-67,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-67,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-67,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-67",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0067-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2025:0067-1",
            url: "https://www.suse.com/support/update/announcement/2025/suse-su-20250067-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2025:0067-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2025-January/020097.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234414",
            url: "https://bugzilla.suse.com/1234414",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234417",
            url: "https://bugzilla.suse.com/1234417",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234421",
            url: "https://bugzilla.suse.com/1234421",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234424",
            url: "https://bugzilla.suse.com/1234424",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234425",
            url: "https://bugzilla.suse.com/1234425",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234426",
            url: "https://bugzilla.suse.com/1234426",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234427",
            url: "https://bugzilla.suse.com/1234427",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234428",
            url: "https://bugzilla.suse.com/1234428",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234432",
            url: "https://bugzilla.suse.com/1234432",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234433",
            url: "https://bugzilla.suse.com/1234433",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234434",
            url: "https://bugzilla.suse.com/1234434",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234435",
            url: "https://bugzilla.suse.com/1234435",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234436",
            url: "https://bugzilla.suse.com/1234436",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234439",
            url: "https://bugzilla.suse.com/1234439",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234440",
            url: "https://bugzilla.suse.com/1234440",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234446",
            url: "https://bugzilla.suse.com/1234446",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234447",
            url: "https://bugzilla.suse.com/1234447",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234449",
            url: "https://bugzilla.suse.com/1234449",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234462",
            url: "https://bugzilla.suse.com/1234462",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234473",
            url: "https://bugzilla.suse.com/1234473",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234476",
            url: "https://bugzilla.suse.com/1234476",
         },
         {
            category: "self",
            summary: "SUSE Bug 1234477",
            url: "https://bugzilla.suse.com/1234477",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47530 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47530/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47537 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47537/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47539 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47539/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47543 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47543/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47544 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47544/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47545 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47545/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47546 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47546/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47596 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47596/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47597 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47597/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47598 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47598/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47599 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47599/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47601 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47601/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47602 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47602/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47603 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47603/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47606 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47606/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47613 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47613/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47774 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47774/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47775 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47775/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47776 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47776/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47777 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47777/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47778 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47778/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2024-47834 page",
            url: "https://www.suse.com/security/cve/CVE-2024-47834/",
         },
      ],
      title: "Security update for gstreamer-plugins-good",
      tracking: {
         current_release_date: "2025-01-10T16:48:42Z",
         generator: {
            date: "2025-01-10T16:48:42Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2025:0067-1",
         initial_release_date: "2025-01-10T16:48:42Z",
         revision_history: [
            {
               date: "2025-01-10T16:48:42Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                        product: {
                           name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                           product_id: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.aarch64",
                        product: {
                           name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.aarch64",
                           product_id: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.aarch64",
                        product: {
                           name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.aarch64",
                           product_id: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.aarch64",
                        product: {
                           name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.aarch64",
                           product_id: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.aarch64",
                        product: {
                           name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.aarch64",
                           product_id: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        product: {
                           name: "gstreamer-plugins-good-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                           product_id: "gstreamer-plugins-good-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        product: {
                           name: "gstreamer-plugins-good-extra-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                           product_id: "gstreamer-plugins-good-extra-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        product: {
                           name: "gstreamer-plugins-good-jack-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                           product_id: "gstreamer-plugins-good-jack-64bit-1.20.1-150400.3.9.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.i586",
                        product: {
                           name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.i586",
                           product_id: "gstreamer-plugins-good-1.20.1-150400.3.9.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.i586",
                        product: {
                           name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.i586",
                           product_id: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.i586",
                        product: {
                           name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.i586",
                           product_id: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.i586",
                        product: {
                           name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.i586",
                           product_id: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.i586",
                        product: {
                           name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.i586",
                           product_id: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                        product: {
                           name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                           product_id: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                        product: {
                           name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                           product_id: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.ppc64le",
                        product: {
                           name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.ppc64le",
                           product_id: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.ppc64le",
                        product: {
                           name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.ppc64le",
                           product_id: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.ppc64le",
                        product: {
                           name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.ppc64le",
                           product_id: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.ppc64le",
                        product: {
                           name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.ppc64le",
                           product_id: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                        product: {
                           name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                           product_id: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.s390x",
                        product: {
                           name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.s390x",
                           product_id: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.s390x",
                        product: {
                           name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.s390x",
                           product_id: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.s390x",
                        product: {
                           name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.s390x",
                           product_id: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.s390x",
                        product: {
                           name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.s390x",
                           product_id: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-32bit-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-32bit-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-32bit-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-extra-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-extra-32bit-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-extra-32bit-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-extra-32bit-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-gtk-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-jack-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-jack-32bit-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-jack-32bit-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-jack-32bit-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.x86_64",
                        product: {
                           name: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.x86_64",
                           product_id: "gstreamer-plugins-good-qtqml-1.20.1-150400.3.9.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Proxy 4.3",
                        product: {
                           name: "SUSE Manager Proxy 4.3",
                           product_id: "SUSE Manager Proxy 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-proxy:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Server 4.3",
                        product: {
                           name: "SUSE Manager Server 4.3",
                           product_id: "SUSE Manager Server 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-server:4.3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64 as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            },
            product_reference: "gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            },
            product_reference: "gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-47530",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47530",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47530",
               url: "https://www.suse.com/security/cve/CVE-2024-47530",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239347 for CVE-2024-47530",
               url: "https://bugzilla.suse.com/1239347",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47530",
      },
      {
         cve: "CVE-2024-47537",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47537",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_count elements of type QtDemuxSample. The problem is that samples_count is read from the input file. And if this value is big enough, this can lead to an integer overflow during the addition. As a consequence, g_try_renew might allocate memory for a significantly smaller number of elements than intended. Following this, the program iterates through samples_count elements and attempts to write samples_count number of elements, potentially exceeding the actual allocated memory size and causing an OOB-write. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47537",
               url: "https://www.suse.com/security/cve/CVE-2024-47537",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234414 for CVE-2024-47537",
               url: "https://bugzilla.suse.com/1234414",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47537",
      },
      {
         cve: "CVE-2024-47539",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47539",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47539",
               url: "https://www.suse.com/security/cve/CVE-2024-47539",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234417 for CVE-2024-47539",
               url: "https://bugzilla.suse.com/1234417",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47539",
      },
      {
         cve: "CVE-2024-47543",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47543",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47543",
               url: "https://www.suse.com/security/cve/CVE-2024-47543",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234462 for CVE-2024-47543",
               url: "https://bugzilla.suse.com/1234462",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47543",
      },
      {
         cve: "CVE-2024-47544",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47544",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47544",
               url: "https://www.suse.com/security/cve/CVE-2024-47544",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234473 for CVE-2024-47544",
               url: "https://bugzilla.suse.com/1234473",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47544",
      },
      {
         cve: "CVE-2024-47545",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47545",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47545",
               url: "https://www.suse.com/security/cve/CVE-2024-47545",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234476 for CVE-2024-47545",
               url: "https://bugzilla.suse.com/1234476",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47545",
      },
      {
         cve: "CVE-2024-47546",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47546",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47546",
               url: "https://www.suse.com/security/cve/CVE-2024-47546",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234477 for CVE-2024-47546",
               url: "https://bugzilla.suse.com/1234477",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47546",
      },
      {
         cve: "CVE-2024-47596",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47596",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47596",
               url: "https://www.suse.com/security/cve/CVE-2024-47596",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234424 for CVE-2024-47596",
               url: "https://bugzilla.suse.com/1234424",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47596",
      },
      {
         cve: "CVE-2024-47597",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47597",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47597",
               url: "https://www.suse.com/security/cve/CVE-2024-47597",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234425 for CVE-2024-47597",
               url: "https://bugzilla.suse.com/1234425",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47597",
      },
      {
         cve: "CVE-2024-47598",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47598",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn't properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47598",
               url: "https://www.suse.com/security/cve/CVE-2024-47598",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234426 for CVE-2024-47598",
               url: "https://bugzilla.suse.com/1234426",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47598",
      },
      {
         cve: "CVE-2024-47599",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47599",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47599",
               url: "https://www.suse.com/security/cve/CVE-2024-47599",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234427 for CVE-2024-47599",
               url: "https://bugzilla.suse.com/1234427",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47599",
      },
      {
         cve: "CVE-2024-47601",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47601",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47601",
               url: "https://www.suse.com/security/cve/CVE-2024-47601",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234428 for CVE-2024-47601",
               url: "https://bugzilla.suse.com/1234428",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47601",
      },
      {
         cve: "CVE-2024-47602",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47602",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47602",
               url: "https://www.suse.com/security/cve/CVE-2024-47602",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234432 for CVE-2024-47602",
               url: "https://bugzilla.suse.com/1234432",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47602",
      },
      {
         cve: "CVE-2024-47603",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47603",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs when the gst_caps_is_equal function is called with invalid caps values. If this happen, then in the function gst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointer dereference. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47603",
               url: "https://www.suse.com/security/cve/CVE-2024-47603",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234433 for CVE-2024-47603",
               url: "https://bugzilla.suse.com/1234433",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47603",
      },
      {
         cve: "CVE-2024-47606",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47606",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47606",
               url: "https://www.suse.com/security/cve/CVE-2024-47606",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234449 for CVE-2024-47606",
               url: "https://bugzilla.suse.com/1234449",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "important",
            },
         ],
         title: "CVE-2024-47606",
      },
      {
         cve: "CVE-2024-47613",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47613",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47613",
               url: "https://www.suse.com/security/cve/CVE-2024-47613",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234447 for CVE-2024-47613",
               url: "https://bugzilla.suse.com/1234447",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47613",
      },
      {
         cve: "CVE-2024-47774",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47774",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47774",
               url: "https://www.suse.com/security/cve/CVE-2024-47774",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234446 for CVE-2024-47774",
               url: "https://bugzilla.suse.com/1234446",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47774",
      },
      {
         cve: "CVE-2024-47775",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47775",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST_READ_UINT32_LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47775",
               url: "https://www.suse.com/security/cve/CVE-2024-47775",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234434 for CVE-2024-47775",
               url: "https://bugzilla.suse.com/1234434",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47775",
      },
      {
         cve: "CVE-2024-47776",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47776",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison  if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47776",
               url: "https://www.suse.com/security/cve/CVE-2024-47776",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234435 for CVE-2024-47776",
               url: "https://bugzilla.suse.com/1234435",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47776",
      },
      {
         cve: "CVE-2024-47777",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47777",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is sufficient. If the buffer is too small, the function reads beyond its bounds. This vulnerability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47777",
               url: "https://www.suse.com/security/cve/CVE-2024-47777",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234436 for CVE-2024-47777",
               url: "https://bugzilla.suse.com/1234436",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47777",
      },
      {
         cve: "CVE-2024-47778",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47778",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47778",
               url: "https://www.suse.com/security/cve/CVE-2024-47778",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234439 for CVE-2024-47778",
               url: "https://bugzilla.suse.com/1234439",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47778",
      },
      {
         cve: "CVE-2024-47834",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2024-47834",
            },
         ],
         notes: [
            {
               category: "general",
               text: "GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GST_MATROSKA_ID_CODECPRIVATE case within the gst_matroska_demux_parse_stream function, a data chunk is allocated using gst_ebml_read_binary. Later, the allocated memory is freed in the gst_matroska_track_free function, by the call to g_free (track->codec_priv). Finally, the freed memory is accessed in the caps_serialize function through gst_value_serialize_buffer. The freed memory will be accessed in the gst_value_serialize_buffer function. This results in a UAF read vulnerability, as the function tries to process memory that has already been freed. This vulnerability is fixed in 1.24.10.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
               "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2024-47834",
               url: "https://www.suse.com/security/cve/CVE-2024-47834",
            },
            {
               category: "external",
               summary: "SUSE Bug 1234440 for CVE-2024-47834",
               url: "https://bugzilla.suse.com/1234440",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Proxy 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.ppc64le",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.s390x",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-1.20.1-150400.3.9.1.x86_64",
                  "SUSE Manager Server 4.3:gstreamer-plugins-good-lang-1.20.1-150400.3.9.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-01-10T16:48:42Z",
               details: "moderate",
            },
         ],
         title: "CVE-2024-47834",
      },
   ],
}

cve-2024-47597

Vulnerability from cvelistv5

Published

2024-12-11 19:01

Modified

2024-12-11 21:51

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0012.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47597",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:50:51.754656Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:51:28.160Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been detected in the function qtdemux_parse_samples within qtdemux.c. This issue arises when the function qtdemux_parse_samples reads data beyond the boundaries of the stream->stco buffer. The following code snippet shows the call to qt_atom_parser_get_offset_unchecked, which leads to the OOB-read when parsing the provided GHSL-2024-245_crash1.mp4 file. This issue may lead to read up to 8 bytes out-of-bounds. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:01:50.820Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-245_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0012.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0012.html",
            },
         ],
         source: {
            advisory: "GHSA-22m6-44pv-4cgj",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47597",
      datePublished: "2024-12-11T19:01:50.820Z",
      dateReserved: "2024-09-27T20:37:22.118Z",
      dateUpdated: "2024-12-11T21:51:28.160Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47606

Vulnerability from cvelistv5

Published

2024-12-11 19:12

Modified

2025-04-19 00:11

Severity ?

8.6 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0014.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47606",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T20:43:34.825705Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T20:44:29.587Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2025-04-19T00:11:05.863Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  url: "https://lists.debian.org/debian-lts-announce/2024/12/msg00016.html",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250418-0003/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "HIGH",
                  vulnIntegrityImpact: "HIGH",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190: Integer Overflow or Wraparound",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:12:40.186Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0014.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0014.html",
            },
         ],
         source: {
            advisory: "GHSA-j7pq-xcp8-8qxx",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47606",
      datePublished: "2024-12-11T19:12:40.186Z",
      dateReserved: "2024-09-27T20:37:22.119Z",
      dateUpdated: "2025-04-19T00:11:05.863Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47530

Vulnerability from cvelistv5

Published

2024-09-30 15:17

Modified

2024-09-30 15:45

Severity ?

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Summary

Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.

References

▼	URL	Tags
	https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95v	x_refsource_CONFIRM
	https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Clinical-Genomics	scout	Version: < 4.89

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:clinical-genomics:scout:-:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "scout",
                  vendor: "clinical-genomics",
                  versions: [
                     {
                        lessThan: "4.89",
                        status: "affected",
                        version: "0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47530",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-30T15:44:10.932306Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-30T15:45:37.010Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "scout",
               vendor: "Clinical-Genomics",
               versions: [
                  {
                     status: "affected",
                     version: "< 4.89",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lack of scheme validation, HTTPS Downgrade Attack can be performed on the users. This vulnerability is fixed in 4.89.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-601",
                     description: "CWE-601: URL Redirection to Untrusted Site ('Open Redirect')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-09-30T15:17:39.731Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95v",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/Clinical-Genomics/scout/security/advisories/GHSA-3x45-2m34-x95v",
            },
            {
               name: "https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Clinical-Genomics/scout/commit/50055edfca9a7183b248019af97e1fb0b0065a02",
            },
         ],
         source: {
            advisory: "GHSA-3x45-2m34-x95v",
            discovery: "UNKNOWN",
         },
         title: "Scout contains an Open Redirect on Login via `next`",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47530",
      datePublished: "2024-09-30T15:17:39.731Z",
      dateReserved: "2024-09-25T21:46:10.929Z",
      dateUpdated: "2024-09-30T15:45:37.010Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47599

Vulnerability from cvelistv5

Published

2024-12-11 19:02

Modified

2024-12-11 21:38

Severity ?

6.8 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0016.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47599",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:37:52.517866Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:38:01.666Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_jpeg_dec_negotiate function in gstjpegdec.c. This function does not check for a NULL return value from gst_video_decoder_set_output_state. When this happens, dereferences of the outstate pointer will lead to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "PASSIVE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:02:52.412Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-247_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0016.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0016.html",
            },
         ],
         source: {
            advisory: "GHSA-p5ff-v9j8-327r",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47599",
      datePublished: "2024-12-11T19:02:52.412Z",
      dateReserved: "2024-09-27T20:37:22.118Z",
      dateUpdated: "2024-12-11T21:38:01.666Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47834

Vulnerability from cvelistv5

Published

2024-12-11 19:18

Modified

2024-12-11 21:15

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GST_MATROSKA_ID_CODECPRIVATE case within the gst_matroska_demux_parse_stream function, a data chunk is allocated using gst_ebml_read_binary. Later, the allocated memory is freed in the gst_matroska_track_free function, by the call to g_free (track->codec_priv). Finally, the freed memory is accessed in the caps_serialize function through gst_value_serialize_buffer. The freed memory will be accessed in the gst_value_serialize_buffer function. This results in a UAF read vulnerability, as the function tries to process memory that has already been freed. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0030.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47834",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:15:13.370606Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:15:31.525Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GST_MATROSKA_ID_CODECPRIVATE case within the gst_matroska_demux_parse_stream function, a data chunk is allocated using gst_ebml_read_binary. Later, the allocated memory is freed in the gst_matroska_track_free function, by the call to g_free (track->codec_priv). Finally, the freed memory is accessed in the caps_serialize function through gst_value_serialize_buffer. The freed memory will be accessed in the gst_value_serialize_buffer function. This results in a UAF read vulnerability, as the function tries to process memory that has already been freed. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "LOW",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-416",
                     description: "CWE-416: Use After Free",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:18:04.069Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-280_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0030.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0030.html",
            },
         ],
         source: {
            advisory: "GHSA-35x4-mx8h-fgm8",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47834",
      datePublished: "2024-12-11T19:18:04.069Z",
      dateReserved: "2024-10-03T14:06:12.643Z",
      dateUpdated: "2024-12-11T21:15:31.525Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47775

Vulnerability from cvelistv5

Published

2024-12-11 19:15

Modified

2024-12-11 21:06

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST_READ_UINT32_LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0027.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47775",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:06:26.150191Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:06:33.799Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been found in the parse_ds64 function within gstwavparse.c. The parse_ds64 function does not check that the buffer buf contains sufficient data before attempting to read from it, doing multiple GST_READ_UINT32_LE operations without performing boundary checks. This can lead to an OOB-read when buf is smaller than expected. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:15:44.607Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-261_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
            },
         ],
         source: {
            advisory: "GHSA-hxxw-2g39-jv2p",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-261: GStreamer has an OOB-read in parse_ds64",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47775",
      datePublished: "2024-12-11T19:15:44.607Z",
      dateReserved: "2024-09-30T21:28:53.234Z",
      dateUpdated: "2024-12-11T21:06:33.799Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47601

Vulnerability from cvelistv5

Published

2024-12-11 19:03

Modified

2024-12-12 14:26

Severity ?

6.8 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47601",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T14:25:58.727068Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T14:26:05.938Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "PASSIVE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:03:36.650Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-249_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0020.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0020.html",
            },
         ],
         source: {
            advisory: "GHSA-fgw2-8jw2-ph33",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-249: GStreamer has a NULL-pointer dereference in Matroska/WebM demuxer",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47601",
      datePublished: "2024-12-11T19:03:36.650Z",
      dateReserved: "2024-09-27T20:37:22.119Z",
      dateUpdated: "2024-12-12T14:26:05.938Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47537

Vulnerability from cvelistv5

Published

2024-12-11 18:51

Modified

2024-12-11 19:15

Severity ?

8.6 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_count elements of type QtDemuxSample. The problem is that samples_count is read from the input file. And if this value is big enough, this can lead to an integer overflow during the addition. As a consequence, g_try_renew might allocate memory for a significantly smaller number of elements than intended. Following this, the program iterates through samples_count elements and attempts to write samples_count number of elements, potentially exceeding the actual allocated memory size and causing an OOB-write. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-094_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0005.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47537",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T19:15:39.558211Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T19:15:49.449Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. The program attempts to reallocate the memory pointed to by stream->samples to accommodate stream->n_samples + samples_count elements of type QtDemuxSample. The problem is that samples_count is read from the input file. And if this value is big enough, this can lead to an integer overflow during the addition. As a consequence, g_try_renew might allocate memory for a significantly smaller number of elements than intended. Following this, the program iterates through samples_count elements and attempts to write samples_count number of elements, potentially exceeding the actual allocated memory size and causing an OOB-write. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "HIGH",
                  vulnIntegrityImpact: "HIGH",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787: Out-of-bounds Write",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190: Integer Overflow or Wraparound",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T18:51:56.158Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-094_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-094_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0005.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0005.html",
            },
         ],
         source: {
            advisory: "GHSA-2939-37w3-9rg9",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47537",
      datePublished: "2024-12-11T18:51:56.158Z",
      dateReserved: "2024-09-25T21:46:10.929Z",
      dateUpdated: "2024-12-11T19:15:49.449Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47774

Vulnerability from cvelistv5

Published

2024-12-11 19:15

Modified

2024-12-12 14:15

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/	x_refsource_CONFIRM
	https://github.com/github/securitylab-vulnerabilities/issues/1826	x_refsource_MISC
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47774",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T14:15:00.272216Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T14:15:07.785Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_avi_subtitle_parse_gab2_chunk function within gstavisubtitle.c. The function reads the name_length value directly from the input file without checking it properly. Then, the a condition, does not properly handle cases where name_length is greater than 0xFFFFFFFF - 17, causing an integer overflow. In such scenario, the function attempts to access memory beyond the buffer leading to an OOB-read. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:15:18.259Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-262_Gstreamer/",
            },
            {
               name: "https://github.com/github/securitylab-vulnerabilities/issues/1826",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/github/securitylab-vulnerabilities/issues/1826",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043.patch",
            },
         ],
         source: {
            advisory: "GHSA-qjr8-gwp5-24w7",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-262: GStreamer has an OOB-read in gst_avi_subtitle_parse_gab2_chunk",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47774",
      datePublished: "2024-12-11T19:15:18.259Z",
      dateReserved: "2024-09-30T21:28:53.234Z",
      dateUpdated: "2024-12-12T14:15:07.785Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47613

Vulnerability from cvelistv5

Published

2024-12-11 19:14

Modified

2024-12-19 21:34

Severity ?

8.6 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0025.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47613",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T14:17:34.089687Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T14:17:51.293Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in `gst_gdk_pixbuf_dec_flush` within `gstgdkpixbufdec.c`. This function invokes `memcpy`, using `out_pix` as the destination address. `out_pix` is expected to point to the frame 0 from the frame structure, which is read from the input file. However, in certain situations, it can points to a NULL frame, causing the subsequent call to `memcpy` to attempt writing to the null address (0x00), leading to a null pointer dereference. This vulnerability can result in a Denial of Service (DoS) by triggering a segmentation fault (SEGV). This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "HIGH",
                  vulnIntegrityImpact: "HIGH",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-19T21:34:19.223Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-115_GHSL-2024-118_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0025.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0025.html",
            },
         ],
         source: {
            advisory: "GHSA-qvwm-8ff7-8p2v",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-118: GStreamer has a null pointer dereference in gst_gdk_pixbuf_dec_flush",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47613",
      datePublished: "2024-12-11T19:14:02.436Z",
      dateReserved: "2024-09-27T20:37:22.120Z",
      dateUpdated: "2024-12-19T21:34:19.223Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47776

Vulnerability from cvelistv5

Published

2024-12-11 19:16

Modified

2024-12-11 21:06

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0027.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47776",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:06:46.744890Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:06:56.613Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gst_wavparse_cue_chunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch causes the comparison  if (size < 4 + ncues * 24) to fail in some cases, allowing the subsequent loop to access beyond the bounds of the data buffer. The root cause of this discrepancy stems from a miscalculation when clipping the chunk size based on upstream data size. This vulnerability allows reading beyond the bounds of the data buffer, potentially leading to a crash (denial of service) or the leak of sensitive data. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:16:04.573Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-260_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
            },
         ],
         source: {
            advisory: "GHSA-qw5m-vfj2-xrx9",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-260: GStreamer has a OOB-read in gst_wavparse_cue_chunk",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47776",
      datePublished: "2024-12-11T19:16:04.573Z",
      dateReserved: "2024-09-30T21:28:53.234Z",
      dateUpdated: "2024-12-11T21:06:56.613Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47545

Vulnerability from cvelistv5

Published

2024-12-11 18:58

Modified

2024-12-13 17:44

Severity ?

6.9 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0010.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47545",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-13T17:44:03.153452Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-13T17:44:20.236Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemux_parse_trak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happens, the subsequent call to gst_buffer_fill will invoke memcpy with a large tocopy size, resulting in an OOB-read. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-191",
                     description: "CWE-191: Integer Underflow (Wrap or Wraparound)",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T18:58:14.462Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-242_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0010.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0010.html",
            },
         ],
         source: {
            advisory: "GHSA-gfcr-8wm5-vq57",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47545",
      datePublished: "2024-12-11T18:58:14.462Z",
      dateReserved: "2024-09-25T21:46:10.931Z",
      dateUpdated: "2024-12-13T17:44:20.236Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47543

Vulnerability from cvelistv5

Published

2024-12-11 18:55

Modified

2024-12-12 14:30

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0009.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47543",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T14:29:43.230153Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T14:30:04.325Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemux_parse_container function within qtdemux.c. In the parent function qtdemux_parse_node, the value of length is not well checked. So, if length is big enough, it causes the pointer end to point beyond the boundaries of buffer. Subsequently, in the qtdemux_parse_container function, the while loop can trigger an OOB-read, accessing memory beyond the bounds of buf. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T18:55:50.210Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-236_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0009.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0009.html",
            },
         ],
         source: {
            advisory: "GHSA-f4cr-4qmv-5fh6",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47543",
      datePublished: "2024-12-11T18:55:50.210Z",
      dateReserved: "2024-09-25T21:46:10.931Z",
      dateUpdated: "2024-12-12T14:30:04.325Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47539

Vulnerability from cvelistv5

Published

2024-12-11 18:53

Modified

2024-12-11 21:41

Severity ?

8.6 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0007.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47539",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:41:01.424458Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:41:10.528Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds write vulnerability was identified in the convert_to_s334_1a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop condition i * 2 < ccpair_size. Specifically, when ccpair_size is even, the allocated size in storage does not match the loop's expected bounds, resulting in an out-of-bounds write. This bug allows for the overwriting of up to 3 bytes beyond the allocated bounds of the storage array. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 8.6,
                  baseSeverity: "HIGH",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "HIGH",
                  vulnIntegrityImpact: "HIGH",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-787",
                     description: "CWE-787: Out-of-bounds Write",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T18:53:00.750Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-195_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0007.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0007.html",
            },
         ],
         source: {
            advisory: "GHSA-c89v-2mmr-7cr9",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47539",
      datePublished: "2024-12-11T18:53:00.750Z",
      dateReserved: "2024-09-25T21:46:10.930Z",
      dateUpdated: "2024-12-11T21:41:10.528Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47602

Vulnerability from cvelistv5

Published

2024-12-11 19:10

Modified

2024-12-12 14:24

Severity ?

6.8 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0019.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47602",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T14:24:18.356233Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T14:24:27.067Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_add_wvpk_header function within matroska-demux.c. This function does not properly check the validity of the stream->codec_priv pointer in the following code. If stream->codec_priv is NULL, the call to GST_READ_UINT16_LE will attempt to dereference a null pointer, leading to a crash of the application. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "PASSIVE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:10:31.683Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-250_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0019.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0019.html",
            },
         ],
         source: {
            advisory: "GHSA-m48f-764w-83c6",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-250: Streamer NULL-pointer dereferences and out-of-bounds reads in Matroska/WebM demuxer",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47602",
      datePublished: "2024-12-11T19:10:31.683Z",
      dateReserved: "2024-09-27T20:37:22.119Z",
      dateUpdated: "2024-12-12T14:24:27.067Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47596

Vulnerability from cvelistv5

Published

2024-12-11 19:01

Modified

2024-12-13 17:42

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0015.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47596",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-13T17:41:58.125719Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-13T17:42:14.846Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemux_parse_svq3_stsd_data function within qtdemux.c. In the FOURCC_SMI_ case, seqh_size is read from the input file without proper validation. If seqh_size is greater than the remaining size of the data buffer, it can lead to an OOB-read in the following call to gst_buffer_fill, which internally uses memcpy. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:01:23.353Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-244_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0015.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0015.html",
            },
         ],
         source: {
            advisory: "GHSA-g338-pff2-5x8w",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47596",
      datePublished: "2024-12-11T19:01:23.353Z",
      dateReserved: "2024-09-27T20:37:22.118Z",
      dateUpdated: "2024-12-13T17:42:14.846Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47778

Vulnerability from cvelistv5

Published

2024-12-11 19:16

Modified

2024-12-11 21:12

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0027.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47778",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:12:16.776786Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:12:34.879Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gst_wavparse_adtl_chunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. As a result, an OOB read occurs in the following while loop. This vulnerability can result in reading up to 4GB of process memory or potentially causing a segmentation fault (SEGV) when accessing invalid memory. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:16:58.215Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-258_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
            },
         ],
         source: {
            advisory: "GHSA-g5r2-cgcp-4228",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-258: GStreamer has an OOB-read in gst_wavparse_adtl_chunk",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47778",
      datePublished: "2024-12-11T19:16:58.215Z",
      dateReserved: "2024-09-30T21:28:53.235Z",
      dateUpdated: "2024-12-11T21:12:34.879Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47546

Vulnerability from cvelistv5

Published

2024-12-11 19:01

Modified

2024-12-13 17:42

Severity ?

6.9 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0013.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47546",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-13T17:42:31.315152Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-13T17:42:41.614Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURCC_c708 case, the subtraction atom_length - 8 may result in an underflow if atom_length is less than 8. When that subtraction underflows, *cclen ends up being a large number, and then cclen is passed to g_memdup2 leading to an out-of-bounds (OOB) read. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-191",
                     description: "CWE-191: Integer Underflow (Wrap or Wraparound)",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:01:05.831Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-243_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0013.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0013.html",
            },
         ],
         source: {
            advisory: "GHSA-8mrc-f6w6-gpph",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47546",
      datePublished: "2024-12-11T19:01:05.831Z",
      dateReserved: "2024-09-25T21:46:10.931Z",
      dateUpdated: "2024-12-13T17:42:41.614Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47777

Vulnerability from cvelistv5

Published

2024-12-11 19:16

Modified

2024-12-11 21:07

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is sufficient. If the buffer is too small, the function reads beyond its bounds. This vulnerability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0027.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47777",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:07:19.494550Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:07:34.497Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been identified in the gst_wavparse_smpl_chunk function within gstwavparse.c. This function attempts to read 4 bytes from the data + 12 offset without checking if the size of the data buffer is sufficient. If the buffer is too small, the function reads beyond its bounds. This vulnerability may result in reading 4 bytes out of the boundaries of the data buffer. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:16:33.169Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-259_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0027.html",
            },
         ],
         source: {
            advisory: "GHSA-p29q-wv55-9qfv",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-259: GStreamer has an OOB-read in gst_wavparse_smpl_chunk",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47777",
      datePublished: "2024-12-11T19:16:33.169Z",
      dateReserved: "2024-09-30T21:28:53.235Z",
      dateUpdated: "2024-12-11T21:07:34.497Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47598

Vulnerability from cvelistv5

Published

2024-12-11 19:02

Modified

2024-12-11 21:42

Severity ?

5.1 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0006.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47598",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T21:40:02.710613Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T21:42:50.530Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in the qtdemux_merge_sample_table function within qtdemux.c. The problem is that the size of the stts buffer isn’t properly checked before reading stts_duration, allowing the program to read 4 bytes beyond the boundaries of stts->data. This vulnerability reads up to 4 bytes past the allocated bounds of the stts array. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "NONE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "LOW",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "LOW",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125: Out-of-bounds Read",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:02:32.029Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-246_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0006.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0006.html",
            },
         ],
         source: {
            advisory: "GHSA-xgf3-8jmm-49hf",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47598",
      datePublished: "2024-12-11T19:02:32.029Z",
      dateReserved: "2024-09-27T20:37:22.118Z",
      dateUpdated: "2024-12-11T21:42:50.530Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47544

Vulnerability from cvelistv5

Published

2024-12-11 18:57

Modified

2024-12-12 16:37

Severity ?

6.8 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0011.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47544",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-12T16:37:30.341361Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-12T16:37:40.731Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. The function qtdemux_parse_sbgp in qtdemux.c is affected by a null dereference vulnerability. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "PASSIVE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T18:57:31.268Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-238_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0011.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0011.html",
            },
         ],
         source: {
            advisory: "GHSA-p9cf-r365-qh32",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47544",
      datePublished: "2024-12-11T18:57:31.268Z",
      dateReserved: "2024-09-25T21:46:10.931Z",
      dateUpdated: "2024-12-12T16:37:40.731Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2024-47603

Vulnerability from cvelistv5

Published

2024-12-11 19:11

Modified

2024-12-11 20:42

Severity ?

6.8 (Medium) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Summary

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs when the gst_caps_is_equal function is called with invalid caps values. If this happen, then in the function gst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointer dereference. This vulnerability is fixed in 1.24.10.

References

▼	URL	Tags
	https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0021.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-47603",
                        options: [
                           {
                              Exploitation: "poc",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-12-11T20:38:14.418203Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-12-11T20:42:29.146Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "gstreamer",
               vendor: "gstreamer",
               versions: [
                  {
                     status: "affected",
                     version: "< 1.24.10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_update_tracks function within matroska-demux.c. The vulnerability occurs when the gst_caps_is_equal function is called with invalid caps values. If this happen, then in the function gst_buffer_get_size the call to GST_BUFFER_MEM_PTR can return a null pointer. Attempting to dereference the size field of this null pointer results in a null pointer dereference. This vulnerability is fixed in 1.24.10.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  attackComplexity: "LOW",
                  attackRequirements: "NONE",
                  attackVector: "LOCAL",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  privilegesRequired: "NONE",
                  subAvailabilityImpact: "NONE",
                  subConfidentialityImpact: "NONE",
                  subIntegrityImpact: "NONE",
                  userInteraction: "PASSIVE",
                  vectorString: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
                  version: "4.0",
                  vulnAvailabilityImpact: "HIGH",
                  vulnConfidentialityImpact: "NONE",
                  vulnIntegrityImpact: "NONE",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-476",
                     description: "CWE-476: NULL Pointer Dereference",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-12-11T19:11:51.382Z",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               name: "https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/",
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://securitylab.github.com/advisories/GHSL-2024-251_Gstreamer/",
            },
            {
               name: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057.patch",
            },
            {
               name: "https://gstreamer.freedesktop.org/security/sa-2024-0021.html",
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://gstreamer.freedesktop.org/security/sa-2024-0021.html",
            },
         ],
         source: {
            advisory: "GHSA-gqcc-q947-jv78",
            discovery: "UNKNOWN",
         },
         title: "GHSL-2024-251: GStreamer NULL-pointer dereference in Matroska/WebM demuxer",
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2024-47603",
      datePublished: "2024-12-11T19:11:51.382Z",
      dateReserved: "2024-09-27T20:37:22.119Z",
      dateUpdated: "2024-12-11T20:42:29.146Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature