Vulnerability Details CVE-2020-23928
An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.3%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.8
References
- https://cwe.mitre.org/data/definitions/126.html
- https://github.com/gpac/gpac/commit/8e05648d6b4459facbc783025c5c42d301fef5c3
- https://github.com/gpac/gpac/issues/1568
- https://github.com/gpac/gpac/issues/1569
- https://cwe.mitre.org/data/definitions/126.html
- https://github.com/gpac/gpac/commit/8e05648d6b4459facbc783025c5c42d301fef5c3
- https://github.com/gpac/gpac/issues/1568
- https://github.com/gpac/gpac/issues/1569
Products affected by CVE-2020-23928
-
cpe:2.3:a:gpac:gpac:-
-
cpe:2.3:a:gpac:gpac:0.5.2
-
cpe:2.3:a:gpac:gpac:0.6.0
-
cpe:2.3:a:gpac:gpac:0.6.1
-
cpe:2.3:a:gpac:gpac:0.7.0
-
cpe:2.3:a:gpac:gpac:0.7.1
-
cpe:2.3:a:gpac:gpac:0.8.0
-
cpe:2.3:a:gpac:gpac:0.9.0
-
cpe:2.3:a:gpac:gpac:0.9.0-development-20191109
-
cpe:2.3:a:gpac:gpac:1.0