Vulnerability Details CVE-2018-20760
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2018-20760
-
-
cpe:2.3:a:gpac:gpac:0.5.2
-
cpe:2.3:a:gpac:gpac:0.6.0
-
cpe:2.3:a:gpac:gpac:0.6.1
-
cpe:2.3:a:gpac:gpac:0.7.0
-
cpe:2.3:a:gpac:gpac:0.7.1
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:18.04
-
cpe:2.3:o:canonical:ubuntu_linux:18.10
-
cpe:2.3:o:debian:debian_linux:8.0