CVE-2024-50665

MEDIUM

Gpac - NULL Pointer Dereference

Title source: rule

Description

gpac 2.4 contains a SEGV at src/isomedia/drm_sample.c:1562:96 in isom_cenc_get_sai_by_saiz_saio in MP4Box.

References (1)

Scores

CVSS v3 5.5
EPSS 0.0012
EPSS Percentile 30.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-476
Status published

Affected Products (1)

gpac/gpac

Timeline

Published Jan 23, 2025
Tracked Since Feb 18, 2026