Lucene search

GoogleOSV:CVE-2023-41000

HistorySep 11, 2023 - 3:16 p.m.

CVE-2023-41000

2023-09-1115:16:02

Google

osv.dev

gpac 2.2.1

use-after-free

vulnerability

gf_bifs_flush_command_list

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

CPENameOperatorVersion
gpaceq0.7.0
gpaceq2.0.0
gpaceq2.2.1
gpaceq0.5.2
gpaceq0.9.0-preview
gpaceq0.8.0
gpaceq2.2.0
gpaceq1.0.1
gpaceq0.6.1
gpaceq0.7.1

Name	Operator	Version
gpac	eq	0.7.0
gpac	eq	2.0.0
gpac	eq	2.2.1
gpac	eq	0.5.2
gpac	eq	0.9.0-preview
gpac	eq	0.8.0
gpac	eq	2.2.0
gpac	eq	1.0.1
gpac	eq	0.6.1
gpac	eq	0.7.1

Rows per page:

1-10 of 131

References

github.com/gpac/gpac/issues/2550

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for OSV:CVE-2023-41000