CVE-2023-2840

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2

Description The issue is related to a NULL Pointer Dereference in the gpac library, specifically in the gf isom fragment add sample ex() function located in isomedia/movie fragments.c. This could allow a remote attacker to execute arbitrary code.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue. As a temporary workaround, consider disabling the gf isom fragment add sample ex() function until a patch is available.