Multiple Vulnerabilities in Media Streaming add-on

Summary

Multiple vulnerabilities have been reported to affect Media Streaming add-on:

• CVE-2024-56807: Out-of-bounds read vulnerability
  If an attacker gains access to the local network, they can then exploit the vulnerability to obtain secret data.
• CVE-2024-56808: Command injection vulnerability
  If an attacker gains access to the local network and a user account, they can then exploit the vulnerability to execute arbitrary commands

We have already fixed the vulnerabilities in the following version:

Recommendation

To fix the vulnerabilities, we recommend updating Media Streaming add-on to the latest version.

Updating Media Streaming add-on

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Media Streaming add-on" and then press ENTER.
   Media Streaming add-on appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Media Streaming add-on is already up to date.
5. Click OK.
   The system updates the application.