PT-2020-10606 · Gpac+1 · Gpac+1

Strongcourage · Published 2018-12-19 · Updated 2020-03-25 · CVE-2019-20630

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0

Description A heap-based buffer over-read issue exists in the BS ReadByte function, which is called from gf bs read bit in utils/bitstream.c. This can cause a denial of service when a crafted MP4 file is processed.

Recommendations For versions prior to 0.8.0, update to version 0.8.0 or later to resolve the issue.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2018-2923

CVE-2019-20630

Affected Products

Alt Linux

Gpac

References · 9

• 🔥 https://github.com/gpac/gpac/issues/1268 · Exploit
• https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-20630 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-20630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-20630 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-20630 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-20630 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20630 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-20630 · Vendor Advisory