Lucene search

K
cve@huntrdevCVE-2023-3291
HistoryJun 16, 2023 - 2:15 a.m.

CVE-2023-3291

2023-06-1602:15:08
CWE-787
CWE-122
@huntrdev
web.nvd.nist.gov
27
cve-2023-3291
heap-based buffer overflow
github
gpac
nvd
security vulnerability

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

15.5%

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

Affected configurations

Nvd
Node
gpacgpacRange<2.2.2
VendorProductVersionCPE
gpacgpac*cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "gpac",
    "product": "gpac/gpac",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.2.2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

AI Score

5.1

Confidence

High

EPSS

0

Percentile

15.5%