{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"gpac","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":[],"id":"tcs_01M5NHT40D7ZJP1NKNK6RR8K2A","modified_at":"2026-08-27T23:04:36.471928602Z","published_at":"2023-02-15T14:15:13.283Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-0841","https://security-tracker.debian.org/tracker/CVE-2023-0841"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-0841","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-0841"}],"summary":"A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation"}