CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

1.02% chance of exploitation in the next 30 days, 61th percentile

Published

2021-07-21

Updated

2024-08-04

Proof-of-concept exploits (1)

• gpac/gpac/issues/1265

References

• CVE Record
• NVD entry

Related

• CVE-2020-1948
• CVE-2020-19488
• CVE-2020-19475
• CVE-2020-19490
• CVE-2020-19474
• CVE-2020-19491