CVE-2023-1449

Published: Mar 17, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability.

Affected (1)

Products: Gpac: Gpac

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gpac Gpac	Version 2.3 dev

Related CWEs

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (8)

https://github.com/gpac/gpac/issues/2387

Source: cna@vuldb.com

ExploitIssue TrackingPatchThird Party Advisory

https://github.com/xxy1126/Vuln/blob/main/gpac/2

Source: cna@vuldb.com

Exploit

https://vuldb.com/?ctiid.223294

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.223294

Source: cna@vuldb.com

Third Party AdvisoryVDB Entry

https://github.com/gpac/gpac/issues/2387

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingPatchThird Party Advisory

https://github.com/xxy1126/Vuln/blob/main/gpac/2

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://vuldb.com/?ctiid.223294

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.223294

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.