Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85325
HistoryNov 30, 2022 - 12:00 a.m.

GPAC Memory Misreference Vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
gpac
multimedia framework
memory misquoting
vulnerability
q_istypeon function
arbitrary code execution
program crash
open source

0.001 Low

EPSS

Percentile

32.0%

GPAC is an open source multimedia framework. GPAC version v2.1-DEV-rev478-g696e6f868-master is vulnerable to a memory misquoting vulnerability that stems from a confusion in the Q_IsTypeOn function in /gpac/src/bifs/unquantize.c responsible for freeing memory. An attacker could exploit this vulnerability to potentially cause a program crash, arbitrary code execution, etc.

0.001 Low

EPSS

Percentile

32.0%