CVE-2020-19481
Summary
| CVE | CVE-2020-19481 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-07-21 18:15:00 UTC |
| Updated | 2021-07-30 18:34:00 UTC |
| Description | An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Runtime error: left shift of negative value (mpegts.c:2373) · Issue #1265 · gpac/gpac · GitHub | MISC | github.com | |
| Runtime error: left shift of 128 by 24 places cannot be represented in type 'int' (mpegts.c:2236) · Issue #1266 · gpac/gpac · GitHub | MISC | github.com | |
| Runtime error: member access within null pointer of type 'GF_M2TS_ES *[8192]' (mpegts.c:2541) · Issue #1267 · gpac/gpac · GitHub | MISC | github.com | |
| fixed potential crash in TS - cf #1264 · gpac/gpac@2320eb7 · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 180719 Debian Security Update for gpac (CVE-2020-19481)