GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parselrc function within gstsubparse.c. The parselrc function calls strchr() to find the character ']' in the string line. The pointer returned by this call is then passed to gstrdup(). However, if the string line does not contain the character ']', strchr() returns NULL, and a call to gstrdup(start + 1) leads to a null pointer dereference. This vulnerability is fixed in 1.24.10.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47835.json",
"cwe_ids": [
"CWE-476"
],
"cna_assigner": "GitHub_M"
}