CVE-2023-46929: Input Validation
Published Jan 3, 2024
·Updated
An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gfavcchangevui /afltest/gpac/src/mediatools/avparsers.c:6872:55 allows attackers to crash the application.
Affected Software
1 affected component
Gpac GPAC=2.3-dev-rev605-gfc9e29089-master
Remediation
Event History
Jan 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-46929?
CVE-2023-46929 is considered a high-severity vulnerability due to its potential to crash the GPAC application.
2
How do I fix CVE-2023-46929?
To remediate CVE-2023-46929, upgrade to the latest version of GPAC that addresses this issue.
3
What components are affected by CVE-2023-46929?
CVE-2023-46929 affects GPAC version 2.3-dev-rev605-gfc9e29089-master, specifically the MP4Box component.
4
What type of attack does CVE-2023-46929 allow?
CVE-2023-46929 allows attackers to exploit vulnerabilities in GPAC, leading to application crashes.
5
Where can I find more information about CVE-2023-46929?
Additional details about CVE-2023-46929 can typically be found in the release notes of GPAC or relevant issue tracking platforms.