Description
dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow.
References (4)
Core 4
Core References
Mailing List, Third Party Advisory mailing-list
https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html
Exploit, Third Party Advisory
https://github.com/gpac/gpac/issues/1348
Scores
CVSS v3
5.5
EPSS
0.0062
EPSS Percentile
70.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (2)
debian/debian_linux
8.0
gpac/gpac
0.5.2 - 0.8.0
Published
Jan 02, 2020
Tracked Since
Feb 18, 2026