CVE-2023-3291
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
There is a heap-based buffer overflow vulnerability in the GitHub repository gpac/gpac prior to version 2.2.2.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code, potentially taking control of the system.
Recommendation
It is recommended to upgrade to version 2.2.2 or later to mitigate this vulnerability.
Other vulnerabilities in gpac/gpac
See all- CVE-2023-4722Medium
Integer overflow or wraparound exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4721Medium
There is an out-of-bounds read vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4720Medium
In the GitHub repository gpac/gpac prior to version 2.3-DEV, there is a floating point comparison bug using an incorrect operator.
- CVE-2023-4683Medium
There is a NULL pointer dereference bug in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4682Medium
Heap-based buffer overflow exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4681Medium
There is a NULL Pointer Dereference vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4678Medium
There is a divide by zero error in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-3523High
An Out-of-bounds Read vulnerability exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3013High
An unchecked return value issue exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3012High
There is a NULL Pointer Dereference bug in the GitHub repository gpac/gpac prior to version 2.2.2.
Original NVD description (English source)
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS