CVE-2019-20630 - An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box

Back Back to CVE browser

MEDIUM

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box

Published Mar 24, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.93%

Description

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) in utils/bitstream.c that can cause a denial of service via a crafted MP4 file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1268
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1268		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 24, 2020

Updated Aug 5, 2024

Reserved Mar 24, 2020

Link CVE-2019-20630

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20630

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-20630