CVE-2020-23267

An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file

• CWE-787

• https://github.com/gpac/gpac/issues/1479Exploit, Issue Tracking, Third Party Advisory
• https://github.com/gpac/gpac/issues/1479Exploit, Issue Tracking, Third Party Advisory

Published

Sep 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23259An issue found in Jsish v.3.0.11 and before allows an attack…7.5
• CVE-2020-23260An issue found in Jsish v.3.0.11 and before allows an attack…7.5
• CVE-2020-23262An issue was discovered in ming-soft MCMS v5.0, where a mali…9.8
• CVE-2020-23263Persistent Cross-site scripting vulnerability on Fork CMS ve…6.1
• CVE-2020-23264Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 a…8.8
• CVE-2020-23266An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String…5.5
• CVE-2020-23269An issue was discovered in gpac 0.8.0. The stbl_GetSampleSiz…5.5
• CVE-2020-23273Heap-buffer overflow in the randomize_iparp function in edit…5.5
• CVE-2020-23282SQL injection in Logon Page in MV's mConnect application, v0…7.5
• CVE-2020-23283Information disclosure in Logon Page in MV's mConnect applic…7.5
• CVE-2020-23284Information disclosure in aspx pages in MV's IDCE applicatio…7.5
• CVE-2020-23302There is a heap-use-after-free at ecma-helpers-string.c:772 …9.8