Memory Leak Discovered in gpac v2.2.1
CVE-2024-24267

7.5HIGH

Key Information:

Vendor

gpac

Status
Gpac
Vendor
CVE Published:
5 February 2024

What is CVE-2024-24267?

The GPAC Media Framework version 2.2.1 is reportedly affected by a memory leak issue originating from the gfio_blob variable used in the gf_fileio_from_blob function. This vulnerability may lead to unintended resource consumption, posing potential risks to system stability and performance. It is crucial for users of GPAC v2.2.1 to review their implementations and apply mitigations to prevent adverse effects caused by this memory management flaw.

References

https://github.com/yinluming13579/gpac_defects/blob/main/...
https://github.com/gpac/gpac/issues/2571
https://github.com/gpac/gpac/commit/d28d9ba45cf4f628a7b2c...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.