CVE-2018-13006

Removed by vendor...

CVE-2018-13006

CVE-2018-13006 is a GPAC/MP4Box vulnerability. The Debian DLA-1432-1 advisory reports two heap-based buffer over-reads in gpac: (1) CVE-2018-13005 in isomedia/box_code_base.c urn_Read (heap over-read due to a faulty while-loop condition) and (2) CVE-2018-13006 in isomedia/box_dump.c hdlr_dump (he...

CVE-2018-13006: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

UBUNTU-CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13005: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

UBUNTU-CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-1000100: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...