CVE-2024-6063

Summary

CVE-2024-6603 is a newly disclosed vulnerability affecting GPAC 2.5-DEV-rev228-g11067ea92-master. This issue, classified as problematic, is located in the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c within the MP4Box component. The vulnerability results in a null pointer dereference, which can be exploited locally. The exploit has been made public, increasing the risk of potential attacks. To mitigate this issue, it is recommended to apply the patch with the identifier 8767ed0a77c4b02287db3723e92c2169f67c85d5 as soon as possible. The associated vulnerability identifier is VDB-268791.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.