Out-of-bounds Read

2024-03-1806:18:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gpac vulnerability

out-of-bounds read

swf_parse.c

denial of service

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

9.0%

JSON

gpac is vulnerable to Out-of-bounds Read. The vulnerability is caused due to incorrect bounds checking when accessing the name array within swf_parse.c. This allows an attacker to potentially execute arbitrary code or cause Denial of Service (DoS).