CVE-2020-35981 — NULL Pointer Dereference in Gpac

CWE-476 — NULL Pointer Dereference4 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 48.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
GpacDebian CcextractorDebian Gpac
Timeline
PublishedApr 21
Latest updateMay 24

Description

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/gpac< gpac 1.0.1+dfsg1-4 (bullseye)
▶Debiangpac/gpac< 1.0.1+dfsg1-4
▶NVDgpac/gpac0.8.0, 1.0.1+1
▶debiandebian/ccextractor< gpac 1.0.1+dfsg1-4 (bullseye)

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gxqw-pvp2-vpq6: An issue was discovered in GPAC version 0↗2022-05-24
▶
OSV
CVE-2020-35981: An issue was discovered in GPAC version 0↗2021-04-21
▶

📋Vendor Advisories

1
Debian
CVE-2020-35981: ccextractor - An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid poi...↗2020
▶
CVE-2020-35981 — NULL Pointer Dereference in Gpac | cvebase