Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43298
HistorySep 18, 2023 - 7:58 a.m.

Memory Leak

2023-09-1807:58:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
memory leak
libgpac.so
gf_list_new
utils/list.c
denial of service
software

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

19.9%

libgpac.so is vulnerable to a Memory Leak. The vulnerability is caused by a defect in the gf_list_new function at utils/list.c . This can lead to unexpected behavior resulting from a low memory condition or Denial Of Service (DOS) by crashing or hanging the program.

CPENameOperatorVersion
libgpac.sole10.1.0
libgpac.sole10.1.0

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

19.9%