CVE-2020-19488 - An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read

Back Back to CVE browser

MEDIUM

An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read

Published Jul 21, 2021

5.5

MEDIUM

CVSS 3.1

EPSS 0.80%

Description

An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (2)

https://github.com/gpac/gpac/commit/6170024568f4dda310e98ef7508477b425c58d09
x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1263
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/gpac/gpac/commit/6170024568f4dda310e98ef7508477b425c58d09		x_refsource_MISCPatchThird Party Advisory
https://github.com/gpac/gpac/issues/1263		x_refsource_MISCExploitThird Party Advisory