CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
Percentile
12.7%
libgpac.so is vulnerable to Out-of-bounds Read. The vulnerability is caused by not validating a variable named buflen
to contain a data of sufficient length in a function MPEG12_ParseSeqHdr
in a file media_tools/mpeg2_ps.c
. A attacker can exploit this vulnerability to mount a Denial Of Service (DOS) attack causing an application to crash.
CPE | Name | Operator | Version |
---|---|---|---|
libgpac.so | le | 10.1.0 | |
libgpac.so | le | 10.1.0 |