An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gpac | Gpac | 2.3-dev-rev588-g7edc40fee-master (including) | 2.3-dev-rev588-g7edc40fee-master (including) |
| Gpac | Ubuntu | focal | * |
| Gpac | Ubuntu | trusty/esm | * |