CVE-2019-20161 An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.
MediumCVSS 5.5
EPSS 0.90%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ccextractor(Debian:11) | All versions | No fix listed |
| debian/ccextractor(Debian:11) | = 0.88+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds2-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds2-2 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-2 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-3 | No fix listed |
| debian/gpac(Debian:11) | < 1.0.1+dfsg1-2 | 1.0.1+dfsg1-2 |
| gpac | = 0.8.0 | No fix listed |
| gpac | = 0.9.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- github.com exploit third-party-advisory
- [debian-lts-announce] 20200120 [SECURITY] [DLA 2072-1] gpac security update mailing-list third-party-advisory