Threats tagged 'ghsa-fww4-38vg-fx8g'

A buffer overflow vulnerability exists in GPAC prior to commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702. The flaw is located in the SVG attribute parsing functions (svg_parse_strings() and gf_svg_parse_attribute()) within src/scenegraph/svg_attributes.c. Exploitation can lead to a denial of service condition. No data indicates any impact on confidentiality or integrity. The vulnerability requires local access and user interaction to trigger.