CVE-2024-28318 — Out-of-bounds Write in Gpac

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
7.1HIGHNVD
EPSS
0.2%
top 62.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
GpacDebian Gpac
Timeline
PublishedMar 15

Description

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swf_get_string at scene_manager/swf_parse.c:325

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:HExploitability: 2.8 | Impact: 4.2

Affected Packages2 packages

▶NVDgpac/gpac2.3-dev-rev921-g422b78ecf-master
▶debiandebian/gpac

🔴Vulnerability Details

2
OSV
CVE-2024-28318: gpac 2↗2024-03-15
▶
GHSA
GHSA-267q-7c3v-5639: gpac 2↗2024-03-15
▶

📋Vendor Advisories

1
Debian
CVE-2024-28318: gpac - gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundar...↗2024
▶
CVE-2024-28318 — Out-of-bounds Write in Gpac | cvebase