Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43281
HistorySep 15, 2023 - 5:24 a.m.

Use After Free

2023-09-1505:24:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
vulnerability
use after free
libgpac.so
function
file
dos
denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%

libgpac.so is vulnerable to Use After Free. The vulnerability is caused by a defect in a function gf_bifs_flush_command_list in file src/bifs/memory_decoder.c. This can lead to application crash resulting in Denial Of Service (DOS).

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0

Percentile

12.7%