CVE-2023-1655

NameCVE-2023-1655
DescriptionHeap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1034187

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gpac (PTS)buster0.5.2-426-gc5ad4e4+dfsg5-5fixed
bullseye (security), bullseye1.0.1+dfsg1-4+deb11u3fixed
sid2.2.1+dfsg1-3.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gpacsourceexperimental2.2.1+dfsg1-1
gpacsourcebuster(not affected)
gpacsourcebullseye(not affected)
gpacsource(unstable)2.2.1+dfsg1-21034187

Notes

[bullseye] - gpac <not-affected> (Vulnerable code not present)
[buster] - gpac <not-affected> (Vulnerable code not present)
https://huntr.dev/bounties/05f1d1de-bbfd-43fe-bdf9-7f73419ce7c9
https://github.com/gpac/gpac/commit/e7f96c2d3774e4ea25f952bcdf55af1dd6e919f4
https://github.com/gpac/gpac/commit/07a17aa004cfcdbc19ed7820444ec6586c0f980a (v2.2.1)

Search for package or bug name: Reporting problems