CVE-2019-20171 An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
MediumCVSS 5.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ccextractor(Debian:11) | All versions | No fix listed |
| debian/ccextractor(Debian:11) | = 0.88+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds2-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.93+ds2-2 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-1 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-2 | No fix listed |
| debian/ccextractor(Debian:11) | = 0.94+ds1-3 | No fix listed |
| debian/gpac(Debian:11) | < 1.0.1+dfsg1-2 | 1.0.1+dfsg1-2 |
| gpac | >= 0.5.2, <= 0.8.0 | No fix listed |
| gpac | = 0.9.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| ubuntu/gpac(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/gpac(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security-tracker.debian.org vendor-advisory
- github.com product
- github.com exploit issue-tracking third-party-advisory
- [debian-lts-announce] 20200120 [SECURITY] [DLA 2072-1] gpac security update mailing-list third-party-advisory