CVE-2019-20171

MEDIUM

GPAC 0.5.2-0.9.0-development-20191109 - Memory Leak in metx_New and abst_Read Functions

Title source: llm

Description

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.

References (3)

Core 3

Core References

Mailing List, Third Party Advisory mailing-list

https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html

Product

https://github.com/gpac/gpac/blob/v0.5.2/src/isomedia/box_code_adobe.c

View Writeup ZIP pw:eip

Exploit, Issue Tracking, Third Party Advisory

https://github.com/gpac/gpac/issues/1337

Scores

CVSS v3 5.5

EPSS 0.0063

EPSS Percentile 70.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-401

Status published

Products (3)

debian/debian_linux 8.0

gpac/gpac 0.9.0

gpac/gpac 0.5.2 - 0.8.0

Published Dec 31, 2019

Tracked Since Feb 18, 2026