CVE-2023-4720
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In the GitHub repository gpac/gpac prior to version 2.3-DEV, there is a floating point comparison bug using an incorrect operator.
Risk Assessment
This bug may lead to unpredictable calculation results, potentially affecting application stability and data security.
Recommendation
It is recommended to update to version 2.3-DEV or later to mitigate this vulnerability.
Other vulnerabilities in gpac/gpac
See all- CVE-2023-4722Medium
Integer overflow or wraparound exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4721Medium
There is an out-of-bounds read vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4683Medium
There is a NULL pointer dereference bug in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4682Medium
Heap-based buffer overflow exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4681Medium
There is a NULL Pointer Dereference vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4678Medium
There is a divide by zero error in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-3523High
An Out-of-bounds Read vulnerability exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3291Low
There is a heap-based buffer overflow vulnerability in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3013High
An unchecked return value issue exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3012High
There is a NULL Pointer Dereference bug in the GitHub repository gpac/gpac prior to version 2.2.2.
Original NVD description (English source)
Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS