CVE-2023-42298

2023-10-1204:15:13

Google

osv.dev

gpac

denial of service

vulnerability

local attacker

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c.

CPENameOperatorVersion
gpaceq0.7.0
gpaceq2.0.0
gpaceq2.2.1
gpaceq0.5.2
gpaceq0.9.0-preview
gpaceq0.8.0
gpaceq2.2.0
gpaceq1.0.1
gpaceq0.6.1
gpaceq0.7.1