CVE-2023-48014

2023-11-1519:15:07

Google

osv.dev

gpac stack overflow hevc_parse_vps_extension software vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.5%

JSON

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.

CPENameOperatorVersion
gpaceq0.7.0
gpaceq2.0.0
gpaceq0.5.2
gpaceq0.9.0-preview
gpaceq0.8.0
gpaceq2.2.0
gpaceq1.0.1
gpaceq0.6.1
gpaceq0.7.1
gpaceq1.0.0