CVE-2018-20762 | BDVDB-2026-112558 Detail

Description#

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/gpac/gpac/commit/35ab4475a7df9b2a4bcab235e379c0c3ec543658
https://lists.debian.org/debian-lts-announce/2019/02/msg00040.html
https://github.com/gpac/gpac/issues/1187
https://usn.ubuntu.com/3926-1/

Exploit#

No public exploit known

History#

Version 12019-02-06Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.