PT-2024-22388 · Gpac+2 · Gpac+2

Janette88

·

Published

2024-03-15

·

Updated

2025-09-26

·

CVE-2024-28318

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Name of the Vulnerable Software and Affected Versions gpac version 2.3-DEV-rev921-g422b78ecf-master
Description The issue is related to an out of boundary write vulnerability via the swf get string function at scene manager/swf parse.c:325. This vulnerability can be exploited by a remote attacker to gain access to confidential information. The vulnerability is associated with a buffer overflow in memory.
Recommendations For gpac version 2.3-DEV-rev921-g422b78ecf-master, consider disabling the swf get string function as a temporary workaround until a patch is available. Restrict access to the scene manager/swf parse.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2024-28318

Affected Products

Debian
Red Os
Gpac