CVE-2023-46932: Gpac

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong class in src/media_tools/avilib.c in gpac/MP4Box.

Affected products

• Gpac Gpac: version 2.3-dev-rev617-g671976fcc-master only

Published 2023-12-09. Last modified 2026-06-17.