CVE-2023-41000: Gpac

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

Affected products

• Gpac Gpac: up to and including 2.2.1

Published 2023-09-11. Last modified 2026-06-17.