VulnSocial

CVE-2024-6063(gpac / gpac)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmx_on_event of the file src/filters/dmx_m2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-268791.

gpac CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • gpac

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
gpac
Products
gpac

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-10: 110-10
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc

    TRC analysis shows attackers chained CVE-2024-6062 and CVE-2024-6063 vulnerabilities in AhsayCBS backup platforms to deploy webshells and cryptocurrency miners. The campaign used AI-assisted PowerShell scripts that automatically suspend mining when Task Manager is detected. Runtime segmentation could have limited the blast radius from compromised backup infrastructure. #CloudSecurity 🔗 Full breakdown: https://aviatrix.ai/threat-research-center/ahsaycbs-cve-2026-105133-105134-webshells-crypto-mining

    0000034
    2.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgpacgpac2.5-dev-rev288-g11067ea92-master--

Explore more

Back to dashboardgpac CVEsgpac vulnerabilities