Paper/Archive/CVE-2024-0322

CVE-2024-0322

gpac gpac/gpac — Out-of-bounds Read in gpac/gpac

EPSS 0.9%public exploit CVSS 9.1

critical.is priorityof 100

50

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 61.2.612 × 2012.2 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Affected

ProductAffectedFixed inSource

gpac/gpacunspecified – < 2.3-DEV2.3-DEVCNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

@huntr_ai (CNA)4.4CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refhuntr.com/bounties/87611fc9-ed7c-43e9-8e52-d83cd270bbec refgithub.com/gpac/gpac/commit/092904b80edbc4dce315684a59cc3184c45c1b70