CVE Feed

    Dashboard / CVE / CVE-2023-39562

    CVE-2023-39562

    GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.

    Published:Aug 28, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 28, 2023
    EPSS Score:0.0002
    CVSS Score:5.5

    Affected Products

    Vendor
    Gpac
    Product
    Gpac

    Exploits

    https://github.com/gpac/gpac/issues/2537https://github.com/gpac/gpac/issues/2537

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-71612 — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79522 (CVSS 6.5) — An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows at…
    CVE-2026-71614 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the…
    CVE-2026-71616 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via …
    CVE-2026-71613 (CVSS 7.8) — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79513 (CVSS 6.5) — A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) o…
    CVE-2026-79514 (CVSS 6.5) — An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to …
    CVE-2026-52489 (CVSS 7.8) — Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute a…
    CVE-2026-15185 (CVSS 1.9) — A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/m…
    CVE-2026-50810 (CVSS 5.5) — A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High