CVE-2023-4679: falha de média gravidade em gpac/gpac
Use After Free in gpac/gpac
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.3%
A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
gpac · gpac/gpacCVEs relacionadas — gpac/gpac
No mesmo produto, das mais perigosas para as menos.
CVE-2021-4043MEDIUMNULL Pointer Dereference in gpac/gpacEPSS 4.6%CVE-2022-1795HIGHUse After Free in gpac/gpacEPSS 1.1%CVE-2024-0321MEDIUMStack-based Buffer Overflow in gpac/gpacEPSS 1.0%CVE-2024-0322MEDIUMOut-of-bounds Read in gpac/gpacEPSS 0.9%CVE-2022-1222MEDIUMInf loop in gpac/gpacEPSS 0.8%CVE-2022-1035LOWSegmentation Fault caused by MP4Box -lsr in gpac/gpacEPSS 0.8%