{"id":"CVE-2023-48011","details":"GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.","modified":"2026-08-12T14:51:33.424526Z","published":"2023-11-15T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48011.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48011.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48011"},{"type":"REPORT","url":"https://github.com/gpac/gpac/issues/2611"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"c70f49dda4946d6db6aa55588f6a756b76bd84ea"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v2.2.0","v2.0.0","v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-48011.json","vanir_signatures_modified":"2026-08-12T14:51:33Z","vanir_signatures":[{"digest":{"function_hash":"186520386737697678047019757854293139872","length":3584},"id":"CVE-2023-48011-5ca25faa","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea","target":{"function":"UpdateRuns","file":"src/isomedia/movie_fragments.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["105473784551395699847681896864128047098","169233142104287468204217020161218650853","295137613972129593023311624045430336211","122227364841943508185648159561028255083","280438232154486073836040673683815890630","268335467947509479801739844967799269108","43649601328013459749662718710286303992","164126358962049468848547674719792262244"],"threshold":0.9},"id":"CVE-2023-48011-9897425d","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/c70f49dda4946d6db6aa55588f6a756b76bd84ea","target":{"file":"src/isomedia/movie_fragments.c"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}