Lucene search

K
redosRedosROS-20230918-03
HistorySep 18, 2023 - 12:00 a.m.

ROS-20230918-03

2023-09-1800:00:00
redos.red-soft.ru
6
gpac
multimedia
platform
vulnerabilities
stack overflow
inaccessible read
heap buffer overflow
crash
attacker
exploitation
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.2%

GPAC multimedia platform vulnerability is related to stack overflow in gf_bt_check_line
scene_manager/loader_bt.c:408. Exploitation of the vulnerability could allow an attacker to cause the application to crash
of the application.

GPAC multimedia platform vulnerability is related to an inaccessible read in MP4Box. Exploitation of the vulnerability
could allow an attacker to cause the application to crash.

GPAC Multimedia Platform vulnerability is related to a heap buffer overflow in the swf_def_font function
Scene_manager/swf_parse.c:1449. Exploitation of the vulnerability could allow an attacker to cause the application to crash
of the application.

The GPAC multimedia platform vulnerability is related to a heap buffer overflow in the function
avi_parse_input_file media_tools/avilib.c:2083. Exploitation of the vulnerability could allow an attacker to
to cause the application to crash.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gpac<= 0.7.1-8UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

16.2%