Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-46427

No fix known EPSS 1%CVSS 9.8

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.

Published 2024-03-09 · CVE record · OSV

Products: gpac

Distro releases

ReleasePackageFixed in
Debian 11gpacno fix
Ubuntu Pro 14.04 LTSgpacno fix
Ubuntu Pro 16.04 LTSgpacno fix
Ubuntu Pro 18.04 LTSgpacno fix
Ubuntu Pro 20.04 LTSgpacno fix
Ubuntu Pro 22.04 LTSgpacno fix
Ubuntu Pro 24.04 LTSgpacno fix