CVE-2023-1449: GPAC av_parsers.c gf_av1_reset_state double free
A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gfav1resetstate of the file mediatools/avparsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-1449?
CVE-2023-1449 is a vulnerability found in GPAC 2.3-DEV-rev35-gbbca86917-master that affects the gf_av1_reset_state function in the file media_tools/av_parsers.c, leading to a double free vulnerability.
What is the severity of CVE-2023-1449?
CVE-2023-1449 has a severity rating of 7.8 (high).
How does CVE-2023-1449 affect the local host?
CVE-2023-1449 allows for the launch of an attack on the local host.
Which software versions are affected by CVE-2023-1449?
CVE-2023-1449 affects GPAC versions 2.3-DEV-rev35-gbbca86917-master and 2.3-dev, as well as Debian versions 1.0.1+dfsg1-4+deb11u3 and 2.2.1+dfsg1-3.
How can I fix CVE-2023-1449?
To fix CVE-2023-1449, update GPAC to version 2.3-DEV-rev35-gbbca86917-master or apply the Debian patches 1.0.1+dfsg1-4+deb11u3 and 2.2.1+dfsg1-3 to the affected versions.