CVE-2024-50664: High severity gpac mp4box vulnerability
Published Jan 23, 2025
·Updated
gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmphadescription in gpac/MP4Box.
Affected Software
2 affected components
Gpac GPAC
Gpac GPAC=2.4
Event History
Jan 23, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-50664?
CVE-2024-50664 is a critical vulnerability that can lead to a heap buffer overflow in GPAC.
2
How do I fix CVE-2024-50664?
To fix CVE-2024-50664, you should update to the latest version of GPAC that addresses this vulnerability.
3
What software is affected by CVE-2024-50664?
CVE-2024-50664 affects GPAC version 2.4.
4
What kind of vulnerability is CVE-2024-50664?
CVE-2024-50664 is categorized as a heap buffer overflow vulnerability.
5
Where does CVE-2024-50664 occur in the code?
CVE-2024-50664 occurs in the function gf_isom_new_mpha_description located at isomedia/sample_descs.c:1799.