CVE-2024-6061: gpac — Katalog CVE

csirt@kutim:~/threat-intel/cve/CVE-2024-6061

CVSS 5.5 · Medium EPSS 0,35%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada gpac. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to infinite loop. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 20c0f29139a82779b86453ce7f68d0681ec7624c. It is recommended to apply a patch to fix this issue. The identifier VDB-268789 was assigned to this vulnerability.

Rincian

Terbit di NVD: 17 Juni 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
EPSS (30 hari): 0,35% peluang dieksploitasi; lebih tinggi dari 26,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
gpac	gpac	Versi 2.5-dev-rev288-g11067ea92-master

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/gpac/gpac/commit/20c0f29139a82779b86453ce7f68d0681ec7624c patch
https://github.com/gpac/gpac/issues/2871 exploit · advisory pihak ketiga
https://vuldb.com/?id.268789 advisory pihak ketiga
https://vuldb.com/?submit.356308 advisory pihak ketiga
https://github.com/user-attachments/files/15801058/poc1.zip exploit
https://vuldb.com/?ctiid.268789 permissions required

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.