CVE-2023-4683 NULL Pointer Dereference in gpac/gpac
A NULL pointer dereference in the GPAC library allows attackers to cause a denial of service via crafted media files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-4683?
CVE-2023-4683 is a medium-severity vulnerability in Gpac Gpac, published on 31 Aug 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
Weakness: CWE-476
Which versions are affected by CVE-2023-4683?
It affects 1 product.
Products include Gpac Gpac.
How do I fix CVE-2023-4683?
No fix has been published for CVE-2023-4683 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-4683 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-4683 exists.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Gpac Gpac
Sources
Also known as DEBIAN-CVE-2023-4683, GHSA-83r5-vgrv-g724, UBUNTU-CVE-2023-4683.