Wsstssw

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A remote attack can cause memory corruption through the Node Insertion component. The issue resides in the `gf node list insert child()` function within the scenegraph/base scenegraph.c file. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.24 **Description** A flaw in the Compositor component allows a remote attacker to trigger a use after free condition. This occurs within the `gf mo get od id()` function located in the `compositor/media object.c` file. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Update to version abi-16.24.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A heap-based buffer overflow occurs in the URL Handler component within the `gf url concatenate ex()` function located in the utils/url.c file. This issue requires local access to be exploited. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A use after free issue exists in the `gf node get name and id()` function within the scenegraph/base scenegraph.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Upgrade to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A stack-based buffer overflow occurs in the `gf node activate ex()` function within the scenegraph/base scenegraph.c file. This issue allows an attack to be launched on the local host. **Recommendations** Update to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to abi-16.23 **Description** A heap-based buffer overflow exists in the MPEG Video Reframer component. This issue occurs within the `mpgviddmx process()` function located in the filters/reframe mpgvid.c file and can be triggered remotely. **Recommendations** Update to version abi-16.23.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils version 2.47 **Description** A weakness in the SHT GROUP Section Handler component allows a local attacker to cause a null pointer dereference, which occurs when a program attempts to read from a memory address that is null. This issue is located within the `bfd elf set group contents()` function in the `bfd/elf.c` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils version 2.47 **Description** A null pointer dereference occurs in the Section Merge component within the ` bfd write merged section()` function of the `bfd/merge.c` file. This issue requires local access to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils version 2.47 **Description** Memory corruption occurs within the ELF String Table component due to an issue in the ` bfd elf strtab delref()` function located in the `bfd/elf-strtab.c` file. This flaw can be triggered via a local approach. **Recommendations** As a temporary workaround, consider restricting the use of the ` bfd elf strtab delref()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils version 2.47 **Description** A flaw in the ELF Orphan Section Handler component allows a local attacker to cause a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null, typically leading to a program crash. This issue is located within the `elf orphan compatible()` function in the `ld/ldelf.c` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict local access to the system to minimize the risk of exploitation.