CVE-2024-50665

MEDIUM

gpac 2.4 - NULL Pointer Dereference in isom_cenc_get_sai_by_saiz_saio

Title source: llm

gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box.

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

CVSS v3 5.5

EPSS 0.0008

EPSS Percentile 24.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-476

Status published

Products (1)

gpac/gpac 2.4

Published Jan 23, 2025

Tracked Since Feb 18, 2026