Out-of-bounds Read in gpac/gpac

CVE-2023-5520

What is CVE-2023-5520?

An out-of-bounds read vulnerability in the GPAC multimedia framework prior to version 2.2.2 can potentially allow an attacker to read memory locations that they should not have access to, possibly leading to information disclosure or program crashes. This security flaw arises in scenarios where input is not properly validated, highlighting the importance of rigorous input handling. Users are advised to update to version 2.2.2 or later to mitigate risks associated with this vulnerability.

References