CVE-2019-20628 - An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box

Back Back to CVE browser

MEDIUM

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box

Published Mar 24, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 1.03%

Description

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (3)

https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/commit/98b727637e32d1d4824101d8947e2dbd573d4fc8
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1269
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/commit/98b727637e32d1d4824101d8947e2dbd573d4fc8		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1269		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 24, 2020

Updated Aug 5, 2024

Reserved Mar 24, 2020

Link CVE-2019-20628

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20628

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20628