CVE-2018-20763 - In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking

Back Back to CVE browser

HIGH

In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking

Published Feb 6, 2019

7.8

HIGH

CVSS 3.0

EPSS 1.41%

Description

In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (4)

https://github.com/gpac/gpac/commit/1c449a34fe0b50aaffb881bfb9d7c5ab0bb18cdd
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1188
x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00040.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://usn.ubuntu.com/3926-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory

Link	Providers	Tags
https://github.com/gpac/gpac/commit/1c449a34fe0b50aaffb881bfb9d7c5ab0bb18cdd		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1188		x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2019/02/msg00040.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://usn.ubuntu.com/3926-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 6, 2019

Updated Aug 5, 2024

Reserved Feb 6, 2019

Link CVE-2018-20763

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-20763

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-20763