Gstreamer CVE-2024-47775

While the CVSS 3.1 score of 9.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H) indicates a critical severity due to network exploitability without authentication and high confidentiality/availability impacts, the real-world risk appears more moderate. The vulnerability is not listed in CISA's KEV catalog, indicating no known active exploitation in the wild. The attack vector requires an application to process attacker-controlled WAV files, which limits exposure compared to vulnerabilities that can be triggered through normal network protocols. The low attack complexity suggests exploitation is straightforward once an attacker can deliver malicious content, but the requirement for file processing adds a layer of defense. Organizations should prioritize patching based on their exposure to untrusted media file processing rather than treating this as an emergency.

An attacker could craft a malicious WAV file with a malformed DS64 chunk that triggers the out-of-bounds read when processed by a vulnerable GStreamer-based application. If the target application processes user-uploaded media files or streams content from untrusted sources, the attacker could deliver the malicious file through file upload forms, streaming protocols, or email attachments. Upon processing, the application would either crash due to accessing invalid memory (denial of service) or potentially leak up to several kilobytes of adjacent memory contents back to the attacker through error messages or side channels.