Vulnerabilities > CVE-2023-41000 - Use After Free vulnerability in Gpac

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2023-09-11

Updated: 2023-09-13

Summary

GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

Part	Description	Count
Application	Gpac Gpac Gpac - Gpac Gpac 0.5.2 Gpac Gpac 0.6.0 Gpac Gpac 0.6.1 Gpac Gpac 0.7.0 Gpac Gpac 0.7.1 Gpac Gpac 0.8.0 Gpac Gpac 0.9.0 Gpac Gpac 0.9.0-Development-20191109 Gpac Gpac 1.0 Gpac Gpac 1.0.1 Gpac Gpac 1.1.0 Gpac Gpac 1.1.0-Dev-Rev1727-G8Be34973D-Master Gpac Gpac 1.1.0-Dev-Rev1759-Geb2D1E6Dd Gpac Gpac 2.1 Gpac Gpac 2.1-Dev-Rev87-G053Aae8-Master Gpac Gpac 2.1-Dev-Rev428-Gcb8Ae46C8-Master	20