CVE-2023-0770
published 2023-02-09CVE-2023-0770: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
PriorityP434high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.39%
31.3th percentile
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | gpac | < gpac 1.0.1+dfsg1-4+deb11u2 (bullseye) | gpac 1.0.1+dfsg1-4+deb11u2 (bullseye) |
| gpac | gpac | < 2.2.0 | 2.2.0 |
| gpac | gpac | >= 0 < 1.0.1+dfsg1-4+deb11u2 | 1.0.1+dfsg1-4+deb11u2 |
| gpac | gpac_gpac | >= unspecified < 2.2 | 2.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5p6c-7q82-x6c9: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2
ghsa_unreviewed·2023-02-10
CVE-2023-0770 [HIGH] CWE-121 GHSA-5p6c-7q82-x6c9: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
OSV
CVE-2023-0770: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2
osv·2023-02-09·CVSS 7.8
CVE-2023-0770 [HIGH] CVE-2023-0770: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
Debian
CVE-2023-0770: gpac - Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
vendor_debian·2023·CVSS 7.8
CVE-2023-0770 [HIGH] CVE-2023-0770: gpac - Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.
Scope: local
bullseye: resolved (fixed in 1.0.1+dfsg1-4+deb11u2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/gpac/gpac/commit/c31941822ee275a35bc148382bafef1c53ec1c26https://huntr.dev/bounties/e0fdeee5-7909-446e-9bd0-db80fd80e8ddhttps://www.debian.org/security/2023/dsa-5411https://github.com/gpac/gpac/commit/c31941822ee275a35bc148382bafef1c53ec1c26https://huntr.dev/bounties/e0fdeee5-7909-446e-9bd0-db80fd80e8ddhttps://www.debian.org/security/2023/dsa-5411
2023-02-09
Published