CVE-2023-37174
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jul 11, 2023
Updated: Jul 19, 2023
Summary
CVE-2023-37174 is a newly identified vulnerability affecting GPAC v2.3-DEV-rev381-g817a848f6-master. This issue resides in the dump_isom_scene function located at /mp4box/filedump.c. The vulnerability results in a segmentation violation, potentially enabling an attacker to execute arbitrary code and gain unauthorized access to the system. This could lead to serious consequences such as data theft or system compromise. Users are strongly advised to update their GPAC software to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- GPAC