Gsingh93

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to 0.7.2 Description: The issue is related to a buffer overflow in the `gf media avc read sps` function, located in `media tools/av parsers.c`. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information. Recommendations: For GPAC versions prior to 0.7.2, update to version 0.7.2 or later to resolve the issue. At the moment, there is no other information about additional mitigation measures for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box versions 0.7.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the memory, which can be exploited to execute arbitrary code. This can be achieved by providing a specially crafted MP4 file to the victim, potentially leading to remote code execution (RCE). The vulnerability is located in the src/isomedia/avc ext.c file, specifically in lines 2417 to 2420. Recommendations: For GPAC MP4Box versions 0.7.1 and earlier, consider disabling the execution of MP4 files from untrusted sources until a patch is available. As a temporary workaround, restrict access to the `src/isomedia/avc ext.c` file to minimize the risk of exploitation. Avoid using the vulnerable function in the affected code lines (2417 to 2420) until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.