CVE-2023-39562

MediumCVSS 5.5

Published: 28/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

GPAC v2.3-DEV-rev449-g5948e4f70-master was found to contain a heap-use-after-free vulnerability in the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by supplying a crafted file.

Risk Assessment

Organizations may be exposed to DoS attacks, which can lead to service outages and potential financial losses.

Recommendation

It is recommended to update to the latest version of GPAC to mitigate this vulnerability and to monitor systems for unauthorized access attempts.

Original NVD description (English source)

GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.