PT-2019-16117 · Gpac+1 · Gpac+1

Clingto · Publicado 2019-12-30 · Atualizado 2025-03-04 · CVE-2019-20171

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109

Description An issue was discovered in GPAC, which results in memory leaks. The memory leaks occur in the metx New function in isomedia/box code base.c and the abst Read function in isomedia/box code adobe.c.

Recommendations For GPAC version 0.8.0, update to a version that fixes the memory leaks. For GPAC version 0.9.0-development-20191109, update to a version that fixes the memory leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-404

CWE-401

CWE-772

Identificadores relacionados

BDU:2025-12840

CVE-2019-20171

DLA-2072-1

MGASA-2020-0137

Produtos afetados

Debian

Gpac

Referências · 43

• 🔥 https://github.com/gpac/gpac/issues/1337 · Exploit
• https://github.com/gpac/gpac/commit/00dfc93369329f1f549567d1b157566217bbfae0 · Nota
• https://github.com/gpac/gpac/issues/1180 · Nota
• https://github.com/gpac/gpac/issues/1250 · Nota
• https://github.com/gpac/gpac/issues/1348 · Nota
• https://github.com/gpac/gpac/issues/1338 · Nota
• https://github.com/gpac/gpac/issues/1179 · Nota
• https://github.com/gpac/gpac/issues/1320 · Nota
• https://github.com/gpac/gpac/issues/1328 · Nota
• https://github.com/gpac/gpac/blob/v0.5.2/src/isomedia/box_code_adobe.c · Nota
• https://github.com/gpac/gpac/issues/1335 · Nota
• https://github.com/gpac/gpac/issues/1327 · Nota
• https://security-tracker.debian.org/tracker/DLA-2072-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-20171 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20171 · Aviso do Fabricante