CVE-2019-13618

High

Description

In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.

SeverityHigh
CVSS7.5
Exploit probability—
ProductGpac
PublishedJul 16, 2019
First seenJul 16, 2019

How to fix

Update
  • gpac gpac0.8.0 or later

Affected products

ProductAffected versionsFixed in
gpac gpacv < 0.8.00.8.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.