Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.1
CVE-2023-3523: Out-of-bounds Read in gpac/gpac
CVE-2023-3523 · published 3 years ago
Summary
A bug in the gpac media player software allows an attacker to access sensitive data that they shouldn't be able to see. This could potentially allow them to gain unauthorized access to your system or steal sensitive information. It's recommended to update to the latest version of gpac to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| gpac | gpac |
<= 2.2.1 cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:* |
Original advisory text
Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
References
- https://huntr.dev/bounties/57e0be03-8484-415e-8b5c-c1fe4546eaac URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3523.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-3523 Vendor Advisory
- https://github.com/gpac/gpac/commit/64201a26476c12a7dbd7ffb5757743af6954db96 Patch
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published6 Jul 2023
Updated4 Nov 2026
First seen12 Aug 2026
Track software like this
Free during beta