First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-0358

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
gpac	gpac/gpac	>= unspecified, < 2.3.0-DEV

References

Timeline

Published: Jan 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-03597.5A missing nullptr-check in handle_ra_input can cause a nullptr-deref.CVE-2023-03605.4The Location Weather WordPress plugin before 1.3.4 does not validate and escape some of its block options before outputting them back in a p CVE-2023-03617.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to rec CVE-2023-03625.4Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them ba CVE-2023-03635.4The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputti CVE-2023-03645.4The real.Kit WordPress plugin before 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a pa CVE-2023-03655.4The React Webcam WordPress plugin through 1.2.0 does not validate and escape some of its shortcode attributes before outputting them back in CVE-2023-03665.4The Loan Comparison WordPress plugin before 1.5.3 does not validate and escape some of its shortcode attributes before outputting them back CVE-2023-03675.4The Pricing Tables For WPBakery Page Builder (formerly Visual Composer) WordPress plugin before 3.0 does not validate and escape some of its CVE-2023-03685.4The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of i CVE-2023-03695.4The GoToWP WordPress plugin through 5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a pag CVE-2023-03705.4The WPB Advanced FAQ WordPress plugin through 1.0.6 does not validate and escape some of its shortcode attributes before outputting them bac

CVE-2023-0358: High severity, CVSS 7.8 | Vulnix