Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-23145: fixed #2365 · gpac/gpac@4ade981

GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.

CVE
#auth

@@ -2,7 +2,7 @@ * GPAC - Multimedia Framework C SDK * * Authors: Jean Le Feuvre * Copyright © Telecom ParisTech 2005-2022 * Copyright © Telecom ParisTech 2005-2023 * All rights reserved * * This file is part of GPAC / LASeR codec sub-project @@ -1539,8 +1539,8 @@ static void lsr_read_rare_full(GF_LASeRCodec *lsr, GF_Node *n) } else { da->type=SVG_STROKEDASHARRAY_ARRAY; da->array.count = lsr_read_vluimsbf5(lsr, “len”); da->array.vals = (Fixed*)gf_malloc(sizeof(Fixed)*da->array.count); da->array.units = (u8*)gf_malloc(sizeof(u8)*da->array.count); da->array.vals = (Fixed*)gf_realloc(da->array.vals, sizeof(Fixed)*da->array.count); da->array.units = (u8*)gf_realloc(da->array.units, sizeof(u8)*da->array.count); if (!da->array.vals || !da->array.units) { lsr->last_error = GF_OUT_OF_MEM; return;

Related news

Debian Security Advisory 5411-1

Debian Linux Security Advisory 5411-1 - Multiple issues were found in GPAC multimedia framework, which could result in denial of service or potentially the execution of arbitrary code.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907