PT-2023-15164 · Unknown+1 · Gpac Mp4Box+1
Xidoo123
·
Publicado
2018-12-19
·
Atualizado
2025-04-10
·
CVE-2022-47091
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b
Description
The issue is related to a Buffer Overflow in the
gf text process sub function of filters/load text.c. This function is part of the GPAC MP4box, which is used for processing and manipulating multimedia files. The Buffer Overflow occurs when the function attempts to process a text input that exceeds the expected buffer size, potentially leading to arbitrary code execution.Recommendations
For GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b, as a temporary workaround, consider disabling the
gf text process sub function until a patch is available. Restrict access to the filters/load text.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Gpac Mp4Box