Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-0841

No fix known EPSS 1%CVSS 6.3

A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.

Published 2023-02-15 · CVE record · OSV

Products: gpac

Distro releases

ReleasePackageFixed in
Debian 11gpacno fix
Ubuntu Pro 14.04 LTSgpacno fix
Ubuntu Pro 16.04 LTSgpacno fix
Ubuntu Pro 18.04 LTSgpacno fix
Ubuntu Pro 20.04 LTSgpacno fix
Ubuntu Pro 22.04 LTSgpacno fix
Ubuntu Pro 24.04 LTSgpacno fix