Vulnerability Details CVE-2020-23931
An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.3%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.8
References
- https://cwe.mitre.org/data/definitions/126.html
- https://github.com/gpac/gpac/commit/093283e727f396130651280609e687cd4778e0d1
- https://github.com/gpac/gpac/issues/1564
- https://github.com/gpac/gpac/issues/1567
- https://cwe.mitre.org/data/definitions/126.html
- https://github.com/gpac/gpac/commit/093283e727f396130651280609e687cd4778e0d1
- https://github.com/gpac/gpac/issues/1564
- https://github.com/gpac/gpac/issues/1567
Products affected by CVE-2020-23931
-
cpe:2.3:a:gpac:gpac:-
-
cpe:2.3:a:gpac:gpac:0.5.2
-
cpe:2.3:a:gpac:gpac:0.6.0
-
cpe:2.3:a:gpac:gpac:0.6.1
-
cpe:2.3:a:gpac:gpac:0.7.0
-
cpe:2.3:a:gpac:gpac:0.7.1
-
cpe:2.3:a:gpac:gpac:0.8.0
-
cpe:2.3:a:gpac:gpac:0.9.0
-
cpe:2.3:a:gpac:gpac:0.9.0-development-20191109
-
cpe:2.3:a:gpac:gpac:1.0