CVE-2018-13006

gpac/gpac
on github

Published

Severity

CVSS v3:
9.8 CRITICAL
CVSS v2:
7.5 HIGH

Description

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.

References

Configurations

CPE23Version StartVersion EndExact Version
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*n/an/a8.0
cpe:2.3:a:gpac:gpac:0.7.1:*:*:*:*:*:*:*n/an/a0.7.1
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*n/an/a16.04
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*n/an/a18.04
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*n/an/a18.10

External Links