CVEvulnerability
CVE-2023-1452
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability.
Affected configurations
• gpac gpac 2.3
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://github.com/gpac/gpac/issues/2386 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4 Exploit
- https://vuldb.com/?ctiid.223297 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.223297 Permissions Required, Third Party Advisory, VDB Entry
- https://github.com/gpac/gpac/issues/2386 Exploit, Issue Tracking, Third Party Advisory
- https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4 Exploit
- https://vuldb.com/?ctiid.223297 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.223297 Permissions Required, Third Party Advisory, VDB Entry