CVE-2024-47544

What it actually does

Null pointer dereference in qtdemux_parse_sbgp within qtdemux.c when parsing malformed sbgp data in media containers, resulting in immediate process crash.

Why it matters to the business

Media playback, transcoding, or streaming services using GStreamer can be disrupted by crafted input files, leading to unplanned downtime and potential loss of availability for content delivery workflows.

How an attack unfolds

An attacker creates a specially malformed MP4 or QuickTime file containing invalid sbgp box structures and supplies it to any application relying on GStreamer's qtdemux parser; during file ingestion the parser dereferences a null pointer and terminates the process.

How to fix it

Upgrade GStreamer to version 1.24.10 or later; apply commit 5be4b6f03689ab438822f6cfcd13f1f300afe203 from the GIT repository for the affected package.

How to confirm the fix worked

Confirm installed GStreamer version reports 1.24.10 or newer; attempt to parse a previously crashing test file and verify absence of segmentation fault.

Typical attack path

1. Construct malicious media file with crafted sbgp atom
2. Deliver file via upload, download, or storage medium to target application
3. Application opens file and invokes qtdemux demuxer
4. qtdemux_parse_sbgp encounters null pointer and crashes

How to detect it

Search application and system logs for segmentation faults or abort signals originating from the qtdemux module during media file processing; correlate with file ingestion timestamps.

• qtdemux_parse_sbgp
• segmentation fault in gstreamer qtdemux

What your security team should do

• Apply the 1.24.10 update across all GStreamer deployments within the next maintenance window
• Inventory applications that ingest untrusted media files and prioritize patching those first
• Add crash monitoring for GStreamer processes handling MP4/QT containers