CVE-2023-46928: Medium severity gpac mp4box vulnerability

Published Nov 1, 2023

Updated

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gfmediachangepl /afltest/gpac/src/mediatools/isomtools.c:3293:42.

Affected Software

1 affected component

Gpac GPAC=2.3-dev-rev605-gfc9e29089-master

Remediation

Patch Available

https://github.com/gpac/gpac/commit/0753bf6d867343a80a044bf47a27d0b7accc8bf1

Event History

Nov 1, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-46928?

The severity of CVE-2023-46928 is medium with a severity value of 5.5.

What is the affected software version of CVE-2023-46928?

CVE-2023-46928 affects GPAC version 2.3-DEV-rev605-gfc9e29089-master.

Where can I find more information about CVE-2023-46928?

More information about CVE-2023-46928 can be found at the following references: [GitHub Issue](https://github.com/gpac/gpac/issues/2661), [GitHub Commit](https://github.com/gpac/gpac/commit/0753bf6d867343a80a044bf47a27d0b7accc8bf1).

How can I fix CVE-2023-46928?

The fix for CVE-2023-46928 is not yet available. It is recommended to apply any patches or updates provided by the software vendor once they are released.

Where can I report a vulnerability in GPAC?

You can report vulnerabilities in GPAC to the software vendor or project maintainers. Details on how to report vulnerabilities can usually be found on their official website or repository.