{"id":"CVE-2023-46927","details":"GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.","modified":"2026-08-12T14:51:26.362859Z","published":"2023-11-01T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46927.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46927.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46927"},{"type":"REPORT","url":"https://github.com/gpac/gpac/issues/2657"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/a7b467b151d9b54badbc4dd71e7a366b7c391817"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"a7b467b151d9b54badbc4dd71e7a366b7c391817"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v2.2.0","v2.0.0","v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46927.json","vanir_signatures_modified":"2026-08-12T14:51:26Z","vanir_signatures":[{"id":"CVE-2023-46927-43bf1930","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/a7b467b151d9b54badbc4dd71e7a366b7c391817","target":{"file":"src/isomedia/isom_write.c"},"deprecated":false,"digest":{"line_hashes":["206711267362056198961079811329623950617","125674707149566424721952462742835284138","208364054610577453462894486686851767169","336190297265910406746845462450280674962","78242073098133643583478156734883060338","238505881520837675078611382377778697494","217661683575898295253833554841229003529","274691330252705086055619466015779952788","271888725215034226297564984826238658475","252111144180810114409010536944914853537","303364941460994975573388132431185138107","197697357167900456077123257668340804729","118045730490262662651504432115431898072","39506696577208167445790281763235191373","35360909474206402243900824907706612773","117377542245749097599476968651717212281","250102282808195411613787717574946914518","59532738376280920497559397941568189205","301939591648337744117998508534951190354","4265747146428999911503105505685560157"],"threshold":0.9}},{"id":"CVE-2023-46927-a13cc032","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/a7b467b151d9b54badbc4dd71e7a366b7c391817","target":{"file":"src/isomedia/isom_write.c","function":"gf_isom_use_compact_size"},"deprecated":false,"digest":{"function_hash":"5535974448424217315963779459922946007","length":1395}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}