Every CVE Search/ Get API key

RLSA-2024:11123

Important: gstreamer1-plugins-base security update

No scoreFix available

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

  • gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538)

  • gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)

  • gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

What each source reports

OSV No score

Important: gstreamer1-plugins-base security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins.

Security Fix(es):

  • gstreamer1-plugins-base: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (CVE-2024-47538)

  • gstreamer1-plugins-base: out-of-bounds write in Ogg demuxer (CVE-2024-47615)

  • gstreamer1-plugins-base: stack-buffer overflow in gst_opus_dec_parse_header (CVE-2024-47607)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:11123
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
gstreamer1-plugins-base
Rocky Linux:9
before 0:1.22.1-3.el9_5
0:1.22.1-3.el9_5

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

RLSA-2024:11123 is a vulnerability with no CVSS score yet in gstreamer1-plugins-base, published March 17, 2025. No source lists public exploit code. Fixed in gstreamer1-plugins-base 0:1.22.1-3.el9_5.

References

MoveEnter Open