Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-20630

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) in utils/bitstream.c that can cause a denial of service via a crafted MP4 file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.8%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
Products affected by CVE-2019-20630
  • Gpac » Gpac » Version: N/A
    cpe:2.3:a:gpac:gpac:-
  • Gpac » Gpac » Version: 0.5.2
    cpe:2.3:a:gpac:gpac:0.5.2
  • Gpac » Gpac » Version: 0.6.0
    cpe:2.3:a:gpac:gpac:0.6.0
  • Gpac » Gpac » Version: 0.6.1
    cpe:2.3:a:gpac:gpac:0.6.1
  • Gpac » Gpac » Version: 0.7.0
    cpe:2.3:a:gpac:gpac:0.7.0
  • Gpac » Gpac » Version: 0.7.1
    cpe:2.3:a:gpac:gpac:0.7.1


Contact Us

Shodan ® - All rights reserved