CVE-2023-48014 - GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c

Back Back to CVE browser

HIGH

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c

Published Nov 15, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.36%

Description

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52103
Advisory
https://github.com/gpac/gpac/commit/66abf0887c89c29a484d9e65e70882794e9e3a1b
Patch
https://github.com/gpac/gpac/issues/2613
ExploitIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-52103		Advisory
https://github.com/gpac/gpac/commit/66abf0887c89c29a484d9e65e70882794e9e3a1b		Patch
https://github.com/gpac/gpac/issues/2613		ExploitIssue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 15, 2023

Updated Aug 29, 2024

Reserved Nov 13, 2023

Link CVE-2023-48014

CISA Vulnrichment

Updated Aug 29, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-48014

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 15, 2023

Updated Aug 29, 2024

Link EUVD-2023-52103

GitHub

No data