CVE-2023-2837

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

No affected versions have been published.

Timeline

Published
May 22, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-283706.1Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrarCVE-2023-283719.8In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory CVE-2023-283722.7A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the CVE-2023-283732.7A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the availability of dataCVE-2023-283746.5Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthCVE-2023-283757.5Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated file disclosure. Using a GET parameter, attackers can disclose arbitCVE-2023-283766.5Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticateCVE-2023-283777.8Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authCVE-2023-283787.8Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potCVE-2023-283799.8A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially craCVE-2023-28389.1Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.CVE-2023-283808.8Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable
CVE-2023-2837: Medium severity, CVSS 5.5 | Vulnix