First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-4681

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
gpac	gpac/gpac	>= unspecified, < 2.3-DEV

References

https://github.com/gpac/gpac/commit/4bac19ad854159b21ba70d8ab7c4e1cd1db8ea1cPatch
https://huntr.dev/bounties/d67c5619-ab36-41cc-93b7-04828e25f60eExploit, Patch, Third Party Advisory
https://github.com/gpac/gpac/commit/4bac19ad854159b21ba70d8ab7c4e1cd1db8ea1cPatch
https://huntr.dev/bounties/d67c5619-ab36-41cc-93b7-04828e25f60eExploit, Patch, Third Party Advisory

Timeline

Published: Aug 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-468107.3A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute c CVE-2023-468137.0An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect acce CVE-2023-468147.8A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute c CVE-2023-468158.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has been identified in CVE-2023-468168.8An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been id CVE-2023-468179.8An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized befo CVE-2023-468187.2An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_al CVE-2023-468195.3Missing Authentication in Apache Software Foundation Apache OFBiz when using the Solr plugin. This issue affects Apache OFBiz: before 18.12.CVE-2023-46825.5Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.CVE-2023-468205.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Iulia Cazan Image Regenerate & Select Crop.This issue affects Im CVE-2023-468217.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers all CVE-2023-468226.1Unauth. Reflected Cross-Site Scripting') vulnerability in Visser Labs Store Exporter for WooCommerce – Export Products, Export Orders, Expor