CyberRota Analysis
AI-GeneratedA buffer over-read vulnerability exists in the GPAC MP4Box component, specifically within the gf_svg_attributes_copy function, which can be exploited with local access. While the severity is low, the public availability of the exploit means that users with local access to the affected systems should prioritize upgrading to version abi-16.23 to mitigate potential risks. Organizations utilizing GPAC should ensure they apply the recommended patch to safeguard against this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public and could be used. Upgrading to version abi-16.23 mitigates this issue. The patch is named afca1f1181668d85941d51ed1adf647807d5d975. Upgrading the affected component is recommended.