Out of Boundary Write Vulnerability in GPAC by GPAC Project
CVE-2024-28318

Currently unrated

Key Information:

Vendor

GPAC Project

Status
GPAC
Vendor
CVE Published:
15 March 2024

What is CVE-2024-28318?

The GPAC project has identified a vulnerability in the GPAC version 2.3-DEV-rev921-g422b78ecf-master which allows for an out of boundary write due to improper handling of strings in the SWF parser. Specifically, the issue arises in the function 'swf_get_string' located at scene_manager/swf_parse.c:325. This vulnerability can potentially lead to unauthorized access and manipulation of data, highlighting the importance of timely updates and patches for affected systems.

References

https://github.com/gpac/gpac/issues/2764

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.