ISOMAN

CVE

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. https://github.com/gpac/gpac/commit/bceb03fd2be95097a7b409ea59914f332fb6bc86
  2. https://lists.debian.org/debian-lts-announce/2018/07/msg00024.html
  3. https://usn.ubuntu.com/3926-1/
  4. https://github.com/gpac/gpac/commit/bceb03fd2be95097a7b409ea59914f332fb6bc86
  5. https://lists.debian.org/debian-lts-announce/2018/07/msg00024.html
  6. https://usn.ubuntu.com/3926-1/