Heap Buffer Overflow in GPAC MP4Box by Gpac
CVE-2024-50664

7.8HIGH

Key Information:

Vendor

Gpac

Status
GPAC MP4Box
Vendor
CVE Published:
23 January 2025

What is CVE-2024-50664?

The GPAC MP4Box 2.4 version exhibits a heap buffer overflow vulnerability located in the gf_isom_new_mpha_description function within the isomedia/sample_descs.c file. This flaw can potentially be exploited, leading to unexpected behaviors and security risks. Users are encouraged to apply patches and updates to safeguard against possible exploitation.

References

https://github.com/gpac/gpac/issues/2988

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.