CVE-2018-20760 - In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled

Back Back to CVE browser

HIGH

In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled

Published Feb 6, 2019

7.8

HIGH

CVSS 3.0

EPSS 1.41%

Description

In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13303
Advisory
https://github.com/gpac/gpac/commit/4c1360818fc8948e9307059fba4dc47ba8ad255d
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1177
x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00040.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://usn.ubuntu.com/3926-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13303		Advisory
https://github.com/gpac/gpac/commit/4c1360818fc8948e9307059fba4dc47ba8ad255d		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1177		x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00040.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://usn.ubuntu.com/3926-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory