CVE-2024-0321: 
NixOS vulnerability analysis and mitigation

A Stack-based Buffer Overflow vulnerability was identified in the GPAC repository (CVE-2024-0321) affecting versions prior to 2.3-DEV. The vulnerability was discovered and disclosed on January 8, 2024, affecting the GPAC MP4Box utility's handling of malformed text files (NVD, Ubuntu Security).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue is classified as CWE-787 (Out-of-bounds Write) and CWE-121 (Stack-based Buffer Overflow). The vulnerability specifically affects the MP4Box utility's text file handling capabilities (NVD).

If exploited, this vulnerability could allow an attacker to cause a denial of service (system crash) or execute arbitrary code when a user or automated system is tricked into opening a specially crafted RST file using MP4Box (Ubuntu Security Notice).

A patch has been released to address this vulnerability. Users should update to GPAC version 2.3-DEV or later. Ubuntu has released security updates for affected versions, with fixes available through standard system updates (Ubuntu Security Notice, GPAC Patch).