SEGV Vulnerability in GPAC Product by GPAC Team
CVE-2023-46930

5.5MEDIUM

Key Information:

Vendor

Gpac

Status
Gpac
Vendor
CVE Published:
1 November 2023

What is CVE-2023-46930?

A segmentation fault (SEGV) vulnerability exists in GPAC 2.3-DEV, specifically within the MP4Box component. This flaw occurs in the function gf_isom_find_od_id_for_track, located in the media_odf.c file. Attackers can potentially exploit this vulnerability to disrupt the normal operation of the software, leading to unexpected behaviors or crashes.

References

https://github.com/gpac/gpac/issues/2666
https://github.com/gpac/gpac/commit/3809955065afa3da1ad58...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-46930 : SEGV Vulnerability in GPAC Product by GPAC Team