PT-2023-9308 · Gpac+1 · Gpac+1

Tmotfl · Publicado 2023-03-17 · Atualizado 2024-08-08 · CVE-2023-1449

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GPAC version 2.3-DEV-rev35-gbbca86917-master

Description A vulnerability has been found in the function gf av1 reset state of the file media tools/av parsers.c, which leads to double free. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

BDU:2024-06193

CVE-2023-1449

DSA-5411-1

Produtos afetados

Gpac

Red Os

Referências · 21

• 🔥 https://github.com/gpac/gpac/issues/2387 · Exploit
• 🔥 https://github.com/xxy1126/Vuln/blob/main/gpac/2 · Exploit
• https://github.com/gpac/gpac/commit/7c07b1346d64354ba3ac6412097cce1db119eef0 · Nota
• https://github.com/gpac/gpac/commit/8ebbfd61c73d61a2913721a492e5a81fb8d9f9a9 · Nota
• https://t.me/cvenotify/51262 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2024-06193 · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-gpac-08-08-24 · Nota
• https://osv.dev/vulnerability/DSA-5411-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-1449 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2023-1449 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1449 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1449 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-1449 · Aviso do Fabricante
• https://t.me/cvenotify/46370 · Publicação no Telegram