gir1.2-gst-plugins-base-1.0: GStreamer is a library for constructing graphs of media-handlingcomponents

GStreamer is a library for constructing graphs of media-handlingcomponents. An OOB-write vulnerability has been identified in thegst_ssa_parse_remove_override_codes function of the gstssaparse.c file.This function is responsible for parsing and removing SSA (SubStationAlpha) style override codes, which are enclosed in curly brackets ({}). Theissue arises when a closing curly bracket "}" appears before an openingcurly bracket "{" in the input string. In this case, memmove() incorrectlyduplicates a substring. With each successive loop iteration, the sizepassed to memmove() becomes progressively larger (strlen(end+1)), leadingto a write beyond the allocated memory bounds. This vulnerability is fixedin 1.24.10.

Where it's fixed