CVE-2018-7752 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Gpac

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 61.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
GpacDebian GpacCanonical Ubuntu Linux+1 more
Timeline
PublishedMar 7
Latest updateMay 14

Description

GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶debiandebian/gpac< gpac 0.5.2-426-gc5ad4e4+dfsg5-4.1 (bullseye)
▶Debiangpac/gpac< 0.5.2-426-gc5ad4e4+dfsg5-4.1
▶NVDgpac/gpac0.7.1

Also affects: Debian Linux 8.0, Ubuntu Linux 16.04, 18.04, 18.10

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9p2f-3x2r-h24p: GPAC through 0↗2022-05-14
▶
OSV
CVE-2018-7752: GPAC through 0↗2018-03-07
▶

📋Vendor Advisories

2
Ubuntu
GPAC vulnerabilities↗2019-03-29
▶
Debian
CVE-2018-7752: gpac - GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function i...↗2018
▶
CVE-2018-7752 — Debian Gpac vulnerability | cvebase