CVE-2023-4679

Use After Free in gpac/gpac

CVSS 5.9 MEDIUMEPSS 0.3%CWE-416

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

gpac · gpac/gpac

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/gpac/gpac/commit/b68b3f0bf5c366e003221d78fd663a1d5514a876 https://huntr.com/bounties/6f721ee7-8785-4c26-801e-f40fed3faaac