CVE-2024-47835

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been detected in the parse_lrc function within gstsubparse.c. The parse_lrc function calls strchr() to find the character ']' in the string line. The pointer returned by this call is then passed to g_strdup(). However, if the string line does not contain the character ']', strchr() returns NULL, and a call to g_strdup(start + 1) leads to a null pointer dereference. This vulnerability is fixed in 1.24.10.

• CWE-476

• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8039.patchPatch
• https://gstreamer.freedesktop.org/security/sa-2024-0029.htmlRelease Notes
• https://securitylab.github.com/advisories/GHSL-2024-263_Gstreamer/Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/12/msg00021.html

Published

Dec 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4783The jQuery T(-) Countdown Widget plugin for WordPress is vul…6.4
• CVE-2024-47830Plane is an open-source project management tool. Plane uses …5.8
• CVE-2024-47831Next.js is a React Framework for the Web. Cersions on the 10…7.5
• CVE-2024-47832ssoready is a single sign on provider implemented via docker…9.8
• CVE-2024-47833Taipy is an open-source Python library for easy, end-to-end …6.5
• CVE-2024-47834GStreamer is a library for constructing graphs of media-hand…9.1
• CVE-2024-47836Admidio is an open-source user management solution. Prior to…4.3
• CVE-2024-4784An issue was discovered in GitLab EE starting from version 1…5.4
• CVE-2024-47840Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2024-47841Improper Limitation of a Pathname to a Restricted Directory …7.5
• CVE-2024-47845Improper Encoding or Escaping of Output vulnerability in The…8.2
• CVE-2024-47846Cross-Site Request Forgery (CSRF) vulnerability in The Wikim…8.8