CVE-2023-46427: Gpac

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.

Affected products

• Gpac Gpac: version 2.3-dev-rev588-g7edc40fee-master only

Published 2024-03-09. Last modified 2026-06-17.