CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the gf_list_count function of the MP4Box component in GPAC versions up to f1219cde, which could be exploited through local execution. Successful exploitation may lead to unintended memory access, potentially allowing an attacker to execute arbitrary code. Users of GPAC, particularly those running versions prior to abi-16.23, should prioritize upgrading to the patched version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used. Upgrading to version abi-16.23 can resolve this issue. This patch is called 49dee5cad329cfed310c1682703df7daa47df31a. It is suggested to upgrade the affected component.