Lucene search

MitreCVE-2023-46929

HistoryJan 03, 2024 - 7:15 p.m.

CVE-2023-46929

2024-01-0319:15:08

mitre

web.nvd.nist.gov

cve-2023-46929

gpac

mp4box

security issue

application crash

nvd

vulnerability

av parser

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows attackers to crash the application.

Affected configurations

Nvd

Node

gpacgpacMatch2.3-dev-rev605-gfc9e29089-master

VendorProductVersionCPE
gpacgpac2.3-dev-rev605-gfc9e29089-mastercpe:2.3:a:gpac:gpac:2.3-dev-rev605-gfc9e29089-master:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gpac	gpac	2.3-dev-rev605-gfc9e29089-master	cpe:2.3:a:gpac:gpac:2.3-dev-rev605-gfc9e29089-master:::::::*

References

github.com/gpac/gpac/commit/4248def5d24325aeb0e35cacde3d56c9411816a6

github.com/gpac/gpac/issues/2662

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-46929