CVE-2023-4722
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Integer overflow or wraparound exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
Risk Assessment
This vulnerability may lead to unexpected application behavior, potentially compromising data integrity and system security.
Recommendation
It is recommended to upgrade to version 2.3-DEV or later to mitigate this vulnerability.
Other vulnerabilities in gpac/gpac
See all- CVE-2023-4721Medium
There is an out-of-bounds read vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4720Medium
In the GitHub repository gpac/gpac prior to version 2.3-DEV, there is a floating point comparison bug using an incorrect operator.
- CVE-2023-4683Medium
There is a NULL pointer dereference bug in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4682Medium
Heap-based buffer overflow exists in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4681Medium
There is a NULL Pointer Dereference vulnerability in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-4678Medium
There is a divide by zero error in the GitHub repository gpac/gpac prior to version 2.3-DEV.
- CVE-2023-3523High
An Out-of-bounds Read vulnerability exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3291Low
There is a heap-based buffer overflow vulnerability in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3013High
An unchecked return value issue exists in the GitHub repository gpac/gpac prior to version 2.2.2.
- CVE-2023-3012High
There is a NULL Pointer Dereference bug in the GitHub repository gpac/gpac prior to version 2.2.2.
Original NVD description (English source)
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS