PT-2024-19550 · Gpac+2 · Gpac+2

Hanxuer · Published 2024-01-25 · Updated 2024-04-12 · CVE-2024-22749

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GPAC version 2.3

Description A buffer overflow issue was detected in GPAC via the gf isom new generic sample description function in the isomedia/isom write.c file at line 4577. This issue can be exploited, potentially leading to security breaches.

Recommendations For GPAC version 2.3, consider disabling the gf isom new generic sample description function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-22749

Affected Products

Debian

Gpac

Red Os

References · 15

• 🔥 https://github.com/gpac/gpac/issues/2713 · Exploit
• 🔥 https://github.com/hanxuer/crashes/blob/main/gapc/01/readme.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-22749 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-22749 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22749 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-22749 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-22749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-22749 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-22749 · Vendor Advisory
• https://github.com/gpac/gpac/commit/7aef8038c6bdd310e65000704e39afaa0e721048 · Note
• https://t.me/cvenotify/69385 · Telegram Post
• https://twitter.com/CVEnew/status/1750554507858317752 · Twitter Post
• https://t.me/cvenotify/68698 · Telegram Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-gpac-cve-2024-22749 · Note
• https://twitter.com/VulmonFeeds/status/1750571463407521956 · Twitter Post