CVE-2023-0760: 
NixOS vulnerability analysis and mitigation

A Heap-based Buffer Overflow vulnerability (CVE-2023-0760) was discovered in GitHub repository gpac/gpac prior to version V2.1.0-DEV. The vulnerability was reported and tracked through multiple security platforms and was assigned a CVSS v3.1 base score of 7.8 (HIGH) by NVD (NVD).

The vulnerability is classified as a Heap-based Buffer Overflow (CWE-122) and Out-of-bounds Write (CWE-787). The CVSS v3.1 vector string is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, user interaction required, and high impacts on confidentiality, integrity, and availability (NVD).

The vulnerability can lead to high impacts on system confidentiality, integrity, and availability. Based on the CVSS scoring, successful exploitation could result in complete compromise of the affected system's security objectives, requiring user interaction for exploitation (NVD).

The vulnerability has been fixed in version V2.1.0-DEV of gpac. For Debian systems, the fix has been backported to version 1.0.1+dfsg1-4+deb11u3 in the oldstable distribution (bullseye). Users are recommended to upgrade their gpac packages to the patched versions (Debian Security).