Lucene search

[email protected]CVE-2024-0322

HistoryJan 08, 2024 - 1:15 p.m.

CVE-2024-0322

2024-01-0813:15:09

CWE-125

[email protected]

web.nvd.nist.gov

cve-2024

out-of-bounds read

github

repository

gpac

nvd

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

7.4 High

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

35.7%

JSON

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

CPENameOperatorVersion
gpac:gpacgpaclt2.3.0
gpac:gpacgpaceq0.6.0
gpac:gpacgpaceq2.3-dev-rev602-ged8424300-master
gpac:gpacgpaceq2.1
gpac:gpacgpaceq1.1.0-dev-rev1759-geb2d1e6dd
gpac:gpacgpaceq-
gpac:gpacgpaceq0.7.0
gpac:gpacgpaceq2.1-dev-rev649-ga8f438d20
gpac:gpacgpaceq2.3-dev-rev566-g50c2ab06f-master
gpac:gpacgpaceq1.0

CPE	Name	Operator	Version
gpac:gpac	gpac	lt	2.3.0
gpac:gpac	gpac	eq	0.6.0
gpac:gpac	gpac	eq	2.3-dev-rev602-ged8424300-master
gpac:gpac	gpac	eq	2.1
gpac:gpac	gpac	eq	1.1.0-dev-rev1759-geb2d1e6dd
gpac:gpac	gpac	eq	-
gpac:gpac	gpac	eq	0.7.0
gpac:gpac	gpac	eq	2.1-dev-rev649-ga8f438d20
gpac:gpac	gpac	eq	2.3-dev-rev566-g50c2ab06f-master
gpac:gpac	gpac	eq	1.0

Rows per page:

1-10 of 451

References

github.com/gpac/gpac/commit/092904b80edbc4dce315684a59cc3184c45c1b70

huntr.com/bounties/87611fc9-ed7c-43e9-8e52-d83cd270bbec

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

7.4 High

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

35.7%

JSON

Related for CVE-2024-0322

debiancve1 ubuntucve1 osv1 prion1 cvelist1 veracode1