CVE-2024-6063: GPAC MP4Box dmx_m2ts.c m2tsdmx_on_event null pointer dereference
First published: Mon Jun 17 2024(Updated: )
A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-268791.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GPAC MP4Box | =2.5-dev-rev288-g11067ea92-master |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6063?
CVE-2024-6063 has been classified as a problematic vulnerability.
How do I fix CVE-2024-6063?
To fix CVE-2024-6063, update GPAC to the latest version that addresses this vulnerability.
What causes the CVE-2024-6063 vulnerability?
CVE-2024-6063 is caused by a null pointer dereference in the m2tsdmx_on_event function of the MP4Box component.
Which versions of GPAC are affected by CVE-2024-6063?
CVE-2024-6063 affects GPAC version 2.5-dev-rev288-g11067ea92-master.
Can CVE-2024-6063 be exploited remotely?
Exploitation of CVE-2024-6063 may require local access or specific conditions, but its details indicate it could be problematic in targeted scenarios.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gpac
- canonical/gpac mp4box
- version/gpac mp4box/2.5-dev-rev288-g11067ea92-master