CVE-2023-3523
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
An Out-of-bounds Read vulnerability exists in the GitHub repository gpac/gpac prior to version 2.2.2.
Risk Assessment
This vulnerability may lead to unauthorized memory access, potentially resulting in the disclosure of sensitive information.
Recommendation
It is recommended to upgrade to version 2.2.2 or later to mitigate this vulnerability.
Other vulnerabilities in gpac/gpac
See all- CVE-2023-4722Medium
Integer overflow or wraparound exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4721Medium
There is an out-of-bounds read vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4720Medium
In the GitHub repository gpac/gpac prior to version 2.3-DEV, there is a floating point comparison bug using an incorrect operator.
- CVE-2023-4683Medium
There is a NULL pointer dereference bug in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4682Medium
Heap-based buffer overflow exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4681Medium
There is a NULL Pointer Dereference vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4678Medium
There is a divide by zero error in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-3291Low
There is a heap-based buffer overflow vulnerability in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3013High
An unchecked return value issue exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3012High
There is a NULL Pointer Dereference bug in the GitHub repository gpac/gpac prior to version 2.2.2.
Original NVD description (English source)
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.