PT-2023-22544 · Gpac+2 · Gpac+2

Published 2018-12-19 · Updated 2025-04-24 · CVE-2023-3012

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2

Description The issue is related to a NULL Pointer Dereference in the gpac repository on GitHub. This problem affects devices that use the gpac package prior to version 2.2.2.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue.

Exploit

Fix

NULL Pointer Dereference

Use After Free

Weakness Enumeration

CWE-476

CWE-416

Related Identifiers

ALT-PU-2018-2923

BDU:2025-05201

CVE-2023-3012

DSA-5452-1

MGASA-2024-0027

Affected Products

Alt Linux

Red Os

Gpac

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3012.json · Exploit
• 🔥 https://huntr.dev/bounties/916b787a-c603-409d-afc6-25bb02070e69 · Exploit
• https://github.com/gpac/gpac/commit/53387aa86c1af1228d0fa57c67f9c7330716d5a7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-3012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3012 · Security Note
• https://debian.org/security/2023/dsa-5452 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-3012 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0027.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3012 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5452-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05201 · Security Note
• https://ubuntu.com/security/CVE-2023-3012 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-3012 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0027 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-3012 · Security Note