GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gst_matroska_demux_parse_blockgroup_or_simpleblock function within matroska-demux.c. This function does not properly check the validity of the GstBuffer *sub pointer before performing dereferences. As a result, null pointer dereferences may occur. This vulnerability is fixed in 1.24.10.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gstreamer | Gstreamer_project | * | 1.24.10 (excluding) |
| Gst-plugins-good1.0 | Ubuntu | focal | * |
| Gst-plugins-good1.0 | Ubuntu | jammy | * |
| Gst-plugins-good1.0 | Ubuntu | noble | * |
| Gst-plugins-good1.0 | Ubuntu | oracular | * |
| Gst-plugins-good1.0 | Ubuntu | upstream | * |