CVE-2020-23928

2021-04-2118:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.

CPENameOperatorVersion
gpaceq0.5.2
gpaceq0.7.1
gpaceq1.0.0
gpaceq0.8.0
gpaceq0.9.0
gpaceq0.6.0
gpaceq0.9.0-preview
gpaceq0.6.1
gpaceq0.7.0

Name	Operator	Version
gpac	eq	0.5.2
gpac	eq	0.7.1
gpac	eq	1.0.0
gpac	eq	0.8.0
gpac	eq	0.9.0
gpac	eq	0.6.0
gpac	eq	0.9.0-preview
gpac	eq	0.6.1
gpac	eq	0.7.0

References

cwe.mitre.org/data/definitions/126.html

github.com/gpac/gpac/commit/8e05648d6b4459facbc783025c5c42d301fef5c3

github.com/gpac/gpac/issues/1568

github.com/gpac/gpac/issues/1569