Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9438-qf7w-49rg

Опубликовано: 26 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.9
CVSS3: 3.3

Описание

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue.

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue.

EPSS

Процентиль: 1%
0.00011
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-404
CWE-476

Связанные уязвимости

CVSS3: 3.3
ubuntu
2 месяца назад

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue.

CVSS3: 3.3
nvd
2 месяца назад

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue.

CVSS3: 3.3
debian
2 месяца назад

A weakness has been identified in GPAC up to 2.4.0. Affected by this i ...

CVSS3: 3.3
fstec
2 месяца назад

Уязвимость упаковщика MP4Box мультимедийной платформы GPAC, связанная с некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.3
redos
около 2 месяцев назад

Уязвимость gpac

EPSS

Процентиль: 1%
0.00011
Низкий

1.9 Low

CVSS4

3.3 Low

CVSS3

Дефекты

CWE-404
CWE-476