CVE-2023-48958

gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.

• CWE-401

• https://gist.github.com/dr0v/1204f7a5f1e1497e7bca066638acfbf5Exploit, Third Party Advisory
• https://github.com/gpac/gpac/issues/2689Exploit, Patch, Third Party Advisory
• https://gist.github.com/dr0v/1204f7a5f1e1497e7bca066638acfbf5Exploit, Third Party Advisory
• https://github.com/gpac/gpac/issues/2689Exploit, Patch, Third Party Advisory

Published

Dec 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48949An issue in the box_add function in openlink virtuoso-openso…7.5
• CVE-2023-4895An issue has been discovered in GitLab EE affecting all vers…4.3
• CVE-2023-48950An issue in the box_col_len function in openlink virtuoso-op…7.5
• CVE-2023-48951An issue in the box_equal function in openlink virtuoso-open…7.5
• CVE-2023-48952An issue in the box_deserialize_reusing function in openlink…7.5
• CVE-2023-48957PureVPN Linux client 2.0.2-Productions fails to properly han…5.3
• CVE-2023-4896A vulnerability exists which allows an authenticated attacke…6.5
• CVE-2023-48963Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via…7.5
• CVE-2023-48964Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via…7.5
• CVE-2023-48965An issue in the component /admin/api.plugs/script of ThinkAd…8.8
• CVE-2023-48966An arbitrary file upload vulnerability in the component /adm…8.8
• CVE-2023-48967Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserializatio…9.8