PT-2024-37355
CVE-2024-6061
·
Published
2024-06-17
·
Updated
2025-10-06
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
GPAC version 2.5-DEV-rev228-g11067ea92-master
Description:
A problematic issue has been found, affecting the
isoffin process function of the src/filters/isoffin read.c file in the MP4Box component. This issue leads to an infinite loop. The attack can be launched on the local host.Recommendations:
Apply a patch to fix this issue, specifically the patch with identifier 20c0f29139a82779b86453ce7f68d0681ec7624c.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾