Heap-based Buffer Overflow

2023-02-1709:21:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libgpac vulnerability buffer overflow application crash improper validations filter reframe_mp3.c mp3_dmx_process.

0.007 Low

EPSS

Percentile

80.1%

JSON

libgpac.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in mp3_dmx_process function of filters/reframe_mp3.c due to improper validations of buffer size which allows an attacker to cause an overflow resulting in an application crash.

CPENameOperatorVersion
libgpac.soeq10.1.0
libgpac.soeq10.1.0

CPE	Name	Operator	Version
	libgpac.so	eq	10.1.0
	libgpac.so	eq	10.1.0

References

github.com/advisories/GHSA-w52x-cp47-xhhw

github.com/gpac/gpac/blob/master/src/filters/reframe_mp3.c#L496

github.com/qianshuidewajueji/poc/blob/main/gpac/mp3_dmx_process_poc3

vuldb.com/?ctiid.221087

vuldb.com/?id.221087

0.007 Low

EPSS

Percentile

80.1%

JSON

Related for VERACODE:39321