CVE-2023-48011
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-48011: A heap-use-after-free vulnerability was identified in GPAC v2.3-DEV-rev566-g50c2ab06f-master. This issue affects the movie_fragments.c file in the isomedia source directory. The flaw lies within the flush_ref_samples function, which can result in memory being accessed after it has been freed, potentially leading to unintended program behavior or crashes. Exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause denial-of-service conditions. Updating to a patched version of GPAC is strongly recommended to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- GPAC