CVE-2023-46001

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 7, 2023
Updated: Nov 16, 2023
CWE ID 120

Summary

CVE-2023-46001 is a buffer overflow vulnerability discovered in gpac MP4Box version 2.3-DEV-rev573-g201320819-master. An attacker, who has local access, can exploit this flaw in the gf_isom_get_user_data function, located at gpac/src/isomedia/isom_read.c:2807:51, to trigger a denial-of-service condition. By feeding specially crafted input to the targeted system, the attacker can potentially cause the application to crash or behave unexpectedly, leading to service disruption. This vulnerability emphasizes the importance of keeping software updated to protect against known security risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share