CVE-2020-19481 - An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box

Back Back to CVE browser

MEDIUM

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box

Published Jul 21, 2021

5.5

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (4)

https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1265
x_refsource_MISCExploitThird Party Advisory
https://github.com/gpac/gpac/issues/1266
x_refsource_MISCExploitThird Party Advisory
https://github.com/gpac/gpac/issues/1267
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1265		x_refsource_MISCExploitThird Party Advisory
https://github.com/gpac/gpac/issues/1266		x_refsource_MISCExploitThird Party Advisory
https://github.com/gpac/gpac/issues/1267		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 21, 2021

Updated Aug 4, 2024

Reserved Aug 13, 2020

Link CVE-2020-19481

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-19481

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-19481