CyberRota Analysis
AI-GeneratedA heap-based buffer overflow vulnerability exists in the URL Handler of GPAC, specifically in the gf_url_concatenate_ex function, which can be exploited locally. Successful exploitation may lead to potential arbitrary code execution or system instability. Users and administrators of GPAC should prioritize upgrading to version abi-16.23 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf_url_concatenate_ex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable of addressing this issue. The identifier of the patch is afca1f1181668d85941d51ed1adf647807d5d975. It is advisable to upgrade the affected component.