CVE-2024-40897

Katalog CVE

CVSS 6.7 · Medium EPSS 0,38%

Kerentanan Out-of-bounds Write pada gstreamer orc. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments.

Rincian

Terbit di NVD

26 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,38% peluang dieksploitasi; lebih tinggi dari 30,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2024/07/26/1 advisory pihak ketiga
• https://jvn.jp/en/jp/JVN02030803/ advisory pihak ketiga
• https://github.com/GStreamer/orc product
• https://gstreamer.freedesktop.org/modules/orc.html product