CVE-2023-23143: Buffer Overflow
Buffer overflow vulnerability in function avcparseslice in file mediatools/avparsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-23143?
CVE-2023-23143 is a buffer overflow vulnerability in the avc_parse_slice function in the GPAC media_tools/av_parsers.c file.
How severe is CVE-2023-23143?
CVE-2023-23143 has a severity score of 7.8 (high).
What software is affected by CVE-2023-23143?
GPAC versions 2.3-DEV-rev1-g4669ba229-master and earlier, as well as gpac package version 1.0.1+dfsg1-4+deb11u3 on Debian, are affected by CVE-2023-23143.
How can I fix CVE-2023-23143?
To fix CVE-2023-23143, update to GPAC version 2.3-DEV-rev1-g4669ba229-master or later, or install gpac package version 1.0.1+dfsg1-4+deb11u3 or later on Debian.
Where can I find more information about CVE-2023-23143?
More information about CVE-2023-23143 can be found at the following references: [GitHub](https://github.com/gpac/gpac/commit/af6a5e7a96ee01a139cce6c9e4edfc069aad17a6), [Debian Security Advisory](https://www.debian.org/security/2023/dsa-5411), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2023-23143).