CVE-2024-6063

Katalog CVE

CVSS 5.5 · Medium EPSS 0,33%

Kerentanan NULL Pointer Dereference pada gpac. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-268791.

Rincian

Terbit di NVD

17 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gpac/gpac/commit/8767ed0a77c4b02287db3723e92c2169f67c85d5 patch
• https://github.com/gpac/gpac/issues/2873 exploit · advisory pihak ketiga
• https://vuldb.com/?submit.356315 advisory pihak ketiga
• https://github.com/user-attachments/files/15801157/poc.zip broken link
• https://vuldb.com/?ctiid.268791 permissions required
• https://vuldb.com/?id.268791 permissions required