USN-7320-1: gpac Ubuntu
Vulnerability summary
USN-7320-1 is a vulnerability in gpac Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 04-03-2025PublishedVulnerability first disclosed.
- 25-06-2026Last modifiedVulnerability information updated.
Description
gpac vulnerabilities It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service (system crash). This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2023-5520, CVE-2024-0322) It was discovered that the GPAC MP4Box utility incorrectly handled certain malformed text files. If a user or automated system using MP4Box were tricked into opening a specially crafted RST file, an attacker could use this issue to cause a denial of service (system crash) or execute arbitrary code. (CVE-2024-0321)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- gpac< 0.5.0+svn4288~dfsg1-4ubuntu1+esm2 | < 0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2 | < 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1 | < 0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2 | < 2.0.0+dfsg1-2ubuntu0.1~esm2 | < 2.2.1+dfsg1-3.1ubuntu0.1~esm2
1 vendor · 1 product