CVE Feed

    Dashboard / CVE / CVE-2024-6061

    CVE-2024-6061

    A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to infinite loop. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 20c0f29139a82779b86453ce7f68d0681ec7624c. It is recommended to apply a patch to fix this issue. The identifier VDB-268789 was assigned to this vulnerability.

    Published:Jun 17, 2024
    Last Modified:Nov 21, 2024
    EPS:Jun 17, 2024
    EPSS Score:0.00039
    CVSS Score:3.3

    Affected Products

    Vendor
    Gpac
    Product
    Gpac

    Exploits

    https://github.com/gpac/gpac/issues/2871https://github.com/user-attachments/files/15801058/poc1.ziphttps://github.com/gpac/gpac/issues/2871https://github.com/user-attachments/files/15801058/poc1.zip

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-71612 — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79522 (CVSS 6.5) — An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows at…
    CVE-2026-71614 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the…
    CVE-2026-71616 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via …
    CVE-2026-71613 (CVSS 7.8) — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79513 (CVSS 6.5) — A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) o…
    CVE-2026-79514 (CVSS 6.5) — An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to …
    CVE-2026-52489 (CVSS 7.8) — Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute a…
    CVE-2026-15185 (CVSS 1.9) — A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/m…
    CVE-2026-50810 (CVSS 5.5) — A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High