CVE-2023-48011

Published: Nov 15, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.

Affected (1)

Products: Gpac: Gpac

Gpac

1 product

Gpac

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gpac Gpac	Version 2.3-dev-rev566-g50c2ab06f-master

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (4)

https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea

Source: cve@mitre.org

Patch

https://github.com/gpac/gpac/issues/2611

Source: cve@mitre.org

ExploitIssue Tracking

https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/gpac/gpac/issues/2611

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

Timeline

No history available yet.