CVE-2023-1452

Published: Mar 17, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability.

Affected (1)

Products: Gpac: Gpac

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gpac Gpac	Version 2.3 dev

Related CWEs

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (8)

https://github.com/gpac/gpac/issues/2386

Source: cna@vuldb.com

ExploitIssue TrackingThird Party Advisory

https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4

Source: cna@vuldb.com

Exploit

https://vuldb.com/?ctiid.223297

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.223297

Source: cna@vuldb.com

Permissions RequiredThird Party AdvisoryVDB Entry

https://github.com/gpac/gpac/issues/2386

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://vuldb.com/?ctiid.223297

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

https://vuldb.com/?id.223297

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party AdvisoryVDB Entry

Timeline

No history available yet.