CyberRota Analysis
AI-GeneratedThe vulnerability affects the GPAC MP4Box component, specifically in the gf_node_get_field function, leading to a heap-based buffer overflow that requires local access for exploitation. The impact includes potential unauthorized access or manipulation of memory, which could compromise system integrity. Organizations using GPAC versions up to f1219cde should prioritize upgrading to version abi-16.23 to mitigate this risk, as the exploit is now publicly available.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version abi-16.23 addresses this issue. The patch is named 49dee5cad329cfed310c1682703df7daa47df31a. The affected component should be upgraded.