CVE-2023-4720

Exploit

EPSS 0.03%
Published 01.09.2023 16:15:08
Last modified 21.11.2024 08:35:49
Source security@huntr.dev
Teams watchlist Login
Open Login

Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Gpac ≫ Gpac Version < 2.3-dev

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.078

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
security@huntr.dev	4	2.5	1.4	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-1077 Floating Point Comparison with Incorrect Operator

The code performs a comparison such as an equality test between two float (floating point) values, but it uses comparison operators that do not account for the possibility of loss of precision.

https://github.com/gpac/gpac/commit/e396648e48c57e2d53988d3fd4465b068b96c89a

Patch

https://huntr.dev/bounties/1dc2954c-8497-49fa-b2af-113e1e9381ad

Patch

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2023-4720

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-4720

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-4720

EUVD