Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w52x-cp47-xhhw

Опубликовано: 15 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

EPSS

Процентиль: 50%
0.00272
Низкий

8.8 High

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 3 года назад

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

CVSS3: 6.3
nvd
почти 3 года назад

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

CVSS3: 6.3
debian
почти 3 года назад

A vulnerability, which was classified as critical, has been found in G ...

CVSS3: 8.8
fstec
почти 3 года назад

Уязвимость функции mp3_dmx_process() мультимедийной платформы GPAC, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.8
redos
больше 1 года назад

Множественные уязвимости gpac

EPSS

Процентиль: 50%
0.00272
Низкий

8.8 High

CVSS3

Дефекты

CWE-122
CWE-787