PT-2023-9309 · Gpac+1 · Gpac+1

Tmotfl · Published 2023-03-17 · Updated 2024-08-08 · CVE-2023-1452

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GPAC version 2.3-DEV-rev35-gbbca86917-master

Description A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow memory buffers. Local access is required for this attack. The issue has been publicly disclosed and may be exploited.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2024-06194

CVE-2023-1452

DSA-5411-1

Affected Products

Gpac

Red Os

References · 20

• 🔥 https://github.com/gpac/gpac/issues/2386 · Exploit
• 🔥 https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4 · Exploit
• https://ubuntu.com/security/CVE-2023-1452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1452 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-1452 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1452 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1452 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5411-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1452 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06194 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-1452 · Vendor Advisory
• https://github.com/gpac/gpac/commit/a5efec8187de02d1f0a412140b0bf030a6747d3f · Note
• https://github.com/gpac/gpac/commit/6d6c4533ca7004f76d524129b52bda241dc231b5 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-gpac-08-08-24 · Note
• https://vuldb.com/?ctiid.223297 · Note