PT-2023-5253
CVE-2023-4754
·
Published
2023-09-04
·
Updated
2023-09-19
Description by
CVSS 3.1
5.3
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
gpac versions prior to 2.3-DEV
Description
The issue is related to an out-of-bounds write in the gpac multimedia platform, specifically in the
swf def font function located at Scene manager/swf parse.c:1449. This can lead to a buffer overflow, potentially allowing an attacker to cause a denial of service or crash the application.Recommendations
For versions prior to 2.3-DEV, update to version 2.3-DEV or later to resolve the issue.
As a temporary workaround, consider disabling the
swf def font function until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾