Application crash via zero DASH timescale
Published May 22, 2023 · Updated Jan 21, 2025
Divide by zero in GPAC before 2.2.2 allows local users to crash MP4Box during DASH packaging of a crafted AVC stream. The dasher_mark_segment_start function divides last_min_segment_start_time by an unchecked ds->timescale value that the malformed stream leaves at zero. Processing the file with MP4Box's DASH path is required, and the demonstrated consequence is application termination from a floating-point exception.
Summary
What happened
Divide by zero in GPAC before 2.2.2 allows local users to crash MP4Box during DASH packaging of a crafted AVC stream. The dasher_mark_segment_start function divides last_min_segment_start_time by an unchecked ds->timescale value that the malformed stream leaves at zero. Processing the file with MP4Box's DASH path is required, and the demonstrated consequence is application termination from a floating-point exception.
The record
- CVE
- CVE-2023-2839
- Published
- May 22, 2023
- Updated
- Jan 21, 2025
- Vendor
- GPAC Project
- Product
- GPAC
- Classifications
- CWE-369
- Attack vector
- local
- Privileges
- unauthenticated
Timeline
How it unfolded
- May 22, 2023CVE publishedPublication date reported by the CVE source.
- Jan 21, 2025Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=unspecified <2.2.2
What conditions does exploitation require?
What is affected?
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- Crafted AVC DASH crash proof of conceptproof of concept · demonstrated
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo