Out-of-bounds Read in gpac/gpac

CVE-2023-2838

What is CVE-2023-2838?

The vulnerability in the GPAC product prior to version 2.2.2 allows for an out-of-bounds read condition, potentially enabling an attacker to read sensitive data outside the intended memory bounds. This kind of vulnerability can be exploited if an attacker is able to control input data or access the affected system resources, leading to unintended information disclosure or other negative impacts on software functionality. It's crucial for users and administrators of GPAC to update to the latest version to mitigate risks associated with this security flaw.

References