GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/gpac/gpac/issues/2296 | issue tracking exploit third party advisory |
https://www.debian.org/security/2023/dsa-5411 | vendor advisory |