CVE-2018-21016 - audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file

Back Back to CVE browser

MEDIUM

audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file

Published Sep 16, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 1.38%

Description

audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13540
Advisory
https://github.com/gpac/gpac/issues/1180
x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-13540		Advisory
https://github.com/gpac/gpac/issues/1180		x_refsource_MISCExploitThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory