CVE-2018-20763

GPAC vulnerability CVE-2018-20763 affects GPAC 0.7.1 and earlier; the issue is an out-of-bounds write in gf_text_get_utf8_line (media_tools/text_import.c) caused by missing szLineConv bounds checking. This memory-operations/bounds issue is associated with the GPAC MP4Box utility and can impact th...

CVE-2018-20762

CVE-2018-20762 affects GPAC up to version 0.7.1, with a buffer overflow in the cat_multiple_files function of mp4box/fileimport.c when processing a local directory with crafted filenames. Multiple advisories (Ubuntu USN-3926-1, Debian DLA-1693-1, Mageia MGASA-2019-0146, OpenVAS entries, OSV feeds...

CVE-2018-1000100

GPAC MP4Box

CVE-2018-20761

GPAC 0.7.1 and earlier are affected by a Buffer Overflow in gf_sm_load_init (scene_manager.c) of libgpac_static.a. The issue is described across multiple advisories (USN-3926-1, MGASA/OSV/DLA entries) and can cause a crash and, in some disclosures, potentially arbitrary code execution when a spec...