What’s Vulnerable › Vulnerabilities

CVE-2023-46001

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-07 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data.

Affected products

• GPAC: 2.3-dev-rev573-g201320819-master

References

• https://github.com/gpac/gpac/commit/e79b0cf7e72404750630bc01340e999f3940dbc4
• https://github.com/gpac/gpac/issues/2629
• https://github.com/gpac/gpac/commit/e79b0cf7e72404750630bc01340e999f3940dbc4
• https://github.com/gpac/gpac/issues/2629

Get alerted when CVE-2023-46001 or the next vulnerability affects your stack