CVE-2023-48014: High severity gpac mp4box vulnerability
Published Nov 15, 2023
·Updated
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevcparsevpsextension function at /mediatools/avparsers.c.
Affected Software
1 affected component
Gpac GPAC=2.3-dev-rev566-g50c2ab06f-master
Remediation
Event History
Nov 15, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48014?
The severity of CVE-2023-48014 is high.
2
What is the affected software of CVE-2023-48014?
The affected software of CVE-2023-48014 is GPAC v2.3-DEV-rev566-g50c2ab06f-master.
3
What is the description of CVE-2023-48014?
CVE-2023-48014 is a stack overflow vulnerability discovered in GPAC v2.3-DEV-rev566-g50c2ab06f-master.
4
How can I fix the CVE-2023-48014 vulnerability?
To fix the CVE-2023-48014 vulnerability, update to a version of GPAC that does not contain the stack overflow vulnerability.
5
Is there any reference available for CVE-2023-48014?
Yes, you can find references for CVE-2023-48014 at the following links: https://github.com/gpac/gpac/issues/2613 and https://github.com/gpac/gpac/commit/66abf0887c89c29a484d9e65e70882794e9e3a1b.