Vulnerabilities > CVE-2023-50120 - Infinite Loop vulnerability in Gpac 2.3

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
gpac
CWE-835
NVD
Published: 2024-01-10
Updated: 2024-01-18

Summary

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

Vulnerable Configurations

Part Description Count
Application
Gpac
1

Common Weakness Enumeration (CWE)

References