{"id":"CVE-2023-5595","summary":"Denial of Service in gpac/gpac","details":"Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.","modified":"2026-08-12T14:51:57.225696Z","published":"2023-10-16T08:25:00.327Z","database_specific":{"cwe_ids":["CWE-400"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5595.json","unresolved_ranges":[{"extracted_events":[{"fixed":"2.3.0-DEV"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"@huntrdev"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/0064cf76-ece1-495d-82b4-e4a1bebeb28e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5595.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5595"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"7a6f636db3360bb16d18078d51e8c596f31302a1"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v2.2.0","v2.0.0","v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5595.json","vanir_signatures_modified":"2026-08-12T14:51:57Z","vanir_signatures":[{"target":{"file":"src/isomedia/media.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["208936068941273071447337337443878089284","66953139143674800397449008452471316414","241404618965639416523994108531585693332","104616351320096267908767319863515143862","300589157539575044756107240167147386375","270012005443187728012353051895573944211","127721739931591448209106175277816353370"]},"id":"CVE-2023-5595-18a80e9f","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1"},{"signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/isomedia/tx3g.c"},"deprecated":false,"digest":{"line_hashes":["152976312512042621609510122632271869200","281110955539741508365450478481948629319","283998398071437767301632563328958075952","269001185067584722402043476548538087327","254595250668608963716947288795962892691","61803721861027287287165895890916799523","282520382676946375255351986667774116927","97643777190363300410960496579744391101","215126807060003219956142668934917438222","241372923552494393452903759054730449698","120605330912786473074934618867679364356","269027913531216558551063048348607400726","109691004948694365973757085642710213950","120202673379034997272667754049727118038","155710435753500000080071300060316573175"],"threshold":0.9},"id":"CVE-2023-5595-2012ee10","signature_type":"Line"},{"target":{"file":"src/isomedia/media.c","function":"Media_GetESD"},"deprecated":false,"digest":{"function_hash":"180978022907838842470784643864777636434","length":9920},"id":"CVE-2023-5595-24219399","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1"},{"deprecated":false,"digest":{"line_hashes":["10151621203401512757433481852470569472","200530731157876815340650546998049342915","12966624068894348513511683695625498448","232565277941771591210999360063206489497","293087083732431568272632404247282909614","316281121831771472666824468169036503728","257944560354782642765751136758389790055","20520670907031457630359045383926251602","174666464381843743538177192079623596979","286663103577027317907796316644452282009","245342876655415446266708956366965975448","297797263176144988261848290828235630130","128749503542867351406027544252829378921","126127374060479259260256313004604290222"],"threshold":0.9},"id":"CVE-2023-5595-4c519026","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/filters/isoffin_load.c"}},{"signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/filters/mux_isom.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["145430894066490721327253216173449321329","97364990716085504220148183789186920328","146413133842705769631805049755243596302","106162063443701276445154147570854650210","3931433963034187004796089262963669926","16228715379897721906520600215491034189","225746268476545977499608175811498458176","178050191228598180931116847425486526712","29554133764687676083497322358741834189","339917481080273599894338323506767795377","159995164078637318002668434031861033904","12257014520478152957290614889257977174","280743713140371733590519785410398823843","286297973820756641153694418174062561416","167635517758547871593266064917624020820","239311186532868020022681289308647682621","310816605137873852793928594522326844866","11333756410851050954352720185536374325","33963552880375405573159449666409216522","206578366171768167442316602228842762543","48968287807872706378999175697648393430","212625941402786598296220203462176383824","191573293737190246127000783466434065458","141161998339818507285932225386453287821","241500669375590803036451651164918946860","51877770695867133251088053159239471858","223168233217659263498690332891322379527","204161186889467763911472957580818304201","293964287574396313582944986466341121474"]},"id":"CVE-2023-5595-90906f6f","signature_type":"Line"},{"digest":{"function_hash":"121106853071229441505150270366423262523","length":91724},"id":"CVE-2023-5595-a61bfa00","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/filters/mux_isom.c","function":"mp4_mux_setup_pid"},"deprecated":false},{"id":"CVE-2023-5595-ad662477","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/isomedia/tx3g.c","function":"gf_isom_parse_text_sample"},"deprecated":false,"digest":{"function_hash":"132749271254960328041617768404466743368","length":1961}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1","target":{"file":"src/isomedia/tx3g.c","function":"gf_isom_get_text_description"},"deprecated":false,"digest":{"function_hash":"132788694655326809495764008471863184020","length":2328},"id":"CVE-2023-5595-b84bd531"},{"target":{"file":"src/filters/isoffin_load.c","function":"isor_get_chapters"},"deprecated":false,"digest":{"function_hash":"247413978171594276186507730312903635602","length":1933},"id":"CVE-2023-5595-b87d45d0","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/7a6f636db3360bb16d18078d51e8c596f31302a1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"}]}