CVE-2023-0760

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
gpac	gpac/gpac	>= unspecified, < V2.1.0-DEV

References

https://github.com/gpac/gpac/commit/ea7395f39f601a7750d48d606e9d10ea0b7beefeExploit, Patch
https://huntr.dev/bounties/d06223df-a473-4c82-96d0-23726b844b21Exploit, Issue Tracking, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5452
https://github.com/gpac/gpac/commit/ea7395f39f601a7750d48d606e9d10ea0b7beefeExploit, Patch
https://huntr.dev/bounties/d06223df-a473-4c82-96d0-23726b844b21Exploit, Issue Tracking, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5452

Timeline

Published: Feb 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-07614.3The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Staff members, which CVE-2023-07624.3The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting designations, which c CVE-2023-07634.3The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could CVE-2023-07645.4The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cr CVE-2023-07658.8The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Inject CVE-2023-07668.8The Newsletter Popup WordPress plugin through 1.2 does not have CSRF checks in some places, which could allow attackers to make logged in us CVE-2023-07678.8An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes CVE-2023-07688.8The Avirato hotels online booking engine WordPress plugin through 5.0.5 does not validate and escape some of its shortcode attributes before CVE-2023-07696.1The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, CVE-2023-07707.8Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.CVE-2023-07718.8SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.CVE-2023-07726.5The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actua