CVE-2024-28319

Name of the Vulnerable Software and Affected Versions gpac version 2.3-DEV-rev921-g422b78ecf-master

Description The issue is related to an out of boundary read vulnerability via the gf dash setup period() function in the media tools/dash client.c file at line 6374. This vulnerability can allow a remote attacker to access confidential information.

Recommendations As a temporary workaround, consider disabling the gf dash setup period() function until a patch is available. Restrict access to the media tools/dash client.c module to minimize the risk of exploitation. Avoid using the gf dash setup period() function in the affected gpac version until the issue is resolved.