Vulnerability · Published Nov 7, 2023 · Assigned by @huntr_ai

CVE-2023-5998Out-of-bounds Read in gpac/gpac

Medium 4.0

In plain English

A medium-severity out-of-bounds read in gpac/gpac from gpac. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities).

Severity (CVSS 3.0)4.0Medium
Exploit odds (30 days)0.6%top 51.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Affected products (as reported)

VendorProductVersions
gpac gpac/gpac unspecified – before 2.3.0-DEV

Weakness: CWE-125 · Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References