CVE-2024-24266: Use After Free
Published Feb 5, 2024
·Updated
gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasherconfigurepid function at /src/filters/dasher.c.
Affected Software
1 affected component
Gpac GPAC=2.2.1
Event History
Feb 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24266?
CVE-2024-24266 has been classified with a high severity due to its potential to exploit use-after-free vulnerabilities.
2
How do I fix CVE-2024-24266?
To fix CVE-2024-24266, you need to update GPAC to a version that addresses this vulnerability.
3
What software versions are affected by CVE-2024-24266?
CVE-2024-24266 specifically affects GPAC version 2.2.1.
4
What is a Use-After-Free vulnerability in the context of CVE-2024-24266?
A Use-After-Free vulnerability, like in CVE-2024-24266, occurs when a program continues to use a pointer after the memory it points to has been freed.
5
Where does the vulnerability CVE-2024-24266 originate in the software?
CVE-2024-24266 originates from the dasher_configure_pid function located in /src/filters/dasher.c.