Vulnerabilities > CVE-2023-46871 - Memory Leak vulnerability in Gpac

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

gpac

CWE-401

NVD

Published: 2023-12-07

Updated: 2023-12-12

Summary

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.

Vulnerable Configurations

Part	Description	Count
Application	Gpac Gpac Gpac - Gpac Gpac 0.5.2 Gpac Gpac 0.6.0 Gpac Gpac 0.6.1 Gpac Gpac 0.7.0 Gpac Gpac 0.7.1 Gpac Gpac 0.8.0 Gpac Gpac 0.9.0 Gpac Gpac 0.9.0-Development-20191109 Gpac Gpac 1.0 Gpac Gpac 1.0.1 Gpac Gpac 1.1.0 Gpac Gpac 1.1.0-Dev-Rev1727-G8Be34973D-Master Gpac Gpac 1.1.0-Dev-Rev1759-Geb2D1E6Dd Gpac Gpac 2.0 Gpac Gpac 2.0.0 Gpac Gpac 2.1 Gpac Gpac 2.1-Dev-Rev87-G053Aae8-Master Gpac Gpac 2.1-Dev-Rev368-Gfd054169B-Master Gpac Gpac 2.1-Dev-Rev428-Gcb8Ae46C8-Master Gpac Gpac 2.1-Dev-Rev478-G696E6F868-Master Gpac Gpac 2.1-Dev-Rev490-G68064E101-Master Gpac Gpac 2.1-Dev-Rev593-G007Bf61A0 Gpac Gpac 2.1-Dev-Rev617-G85Ce76Efd Gpac Gpac 2.1-Dev-Rev644-G5C4Df2A67 Gpac Gpac 2.1-Dev-Rev649-Ga8F438D20 Gpac Gpac 2.2-Rev0-Gab012Bbfb-Master Gpac Gpac 2.2.1 Gpac Gpac 2.3-Dev-Rev1-G4669Ba229-Master Gpac Gpac 2.3-Dev-Rev35-Gbbca86917-Master Gpac Gpac 2.3-Dev-Rev40-G3602A5Ded Gpac Gpac 2.3-Dev-Rev566-G50C2Ab06F-Master Gpac Gpac 2.3-Dev-Rev573-G201320819-Master Gpac Gpac 2.3-Dev-Rev602-Ged8424300-Master	37

Common Weakness Enumeration (CWE)

CWE-401 - Improper Release of Memory Before Removing Last Reference ('Memory Leak')

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References