CyberRota Analysis
AI-GeneratedA vulnerability in the MP4Box component of GPAC allows local attackers to trigger a reachable assertion in the stbl_GetSampleInfos function, potentially leading to application instability. While the severity is classified as low, organizations using affected versions should prioritize upgrading to version abi-16.23 to mitigate the risk of exploitation, especially if the software is deployed in sensitive environments. Immediate action is recommended due to the public availability of the exploit.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version abi-16.23 addresses this issue. The patch is identified as 49dee5cad329cfed310c1682703df7daa47df31a. It is advisable to upgrade the affected component.