CVE Vulnerability

CVE-2023-0841

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://vuldb.com/?id.221087 Third Party Advisory
https://github.com/qianshuidewajueji/poc/blob/main/gpac/mp3_dmx_process_poc3 Exploit
https://vuldb.com/?ctiid.221087 Permissions Required Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:gpac:gpac:2.3-dev-rev40-g3602a5ded:*:*:*:*:*:*:*
Information

Published : 2023-02-15 02:15

Updated : 2023-02-23 04:52

NVD link : CVE-2023-0841

Mitre link : CVE-2023-0841

Products Affected

Gpac

CWE
CWE-122