PT-2021-10777 · Gpac · Gpac

Gutiniaoo · Published 2021-10-12 · Updated 2021-10-18 · CVE-2020-22674

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions gpac version 0.8.0

Description An issue exists in the function FixTrackID located in isom intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input. This is due to an invalid memory dereference.

Recommendations For gpac version 0.8.0, consider disabling the FixTrackID function as a temporary workaround until a patch is available. Restrict access to the isom intern.c file to minimize the risk of exploitation. Avoid using crafted inputs that may trigger the denial of service.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-22674

Affected Products

Gpac

References · 10

• 🔥 https://github.com/gpac/gpac/issues/1346 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-22674 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-22674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-22674 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-22674 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-22674 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-22674 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-22674 · Security Note
• https://github.com/gpac/gpac/commit/6040a5981a9f51410bd18af8820afbd2748c2d76 · Note
• https://t.me/cibsecurity/30463 · Telegram Post