Skip to content
OpenAdvisories
Unscored USN-3926-1 8 CVEs

gpac vulnerabilities

Published Mar 29, 2019 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the GPAC MP4Box utility incorrectly handled certain
memory operations. If an user or automated system were tricked into opening a
specially crafted MP4 file, a remote attacker could use this issue to cause
MP4Box to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS gpac 0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1
Ubuntu · 18.04 LTS 18.04:LTS gpac 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1

Vulnerabilities 8

  • Unscored —
    CVE-2018-1000100

    GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines 2417 to …

    gpac Ubuntu
  • Unscored —
    CVE-2018-13005

    An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buf…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-13006

    An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c func…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-20760

    In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-boun…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-20761

    GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c i…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-20762

    GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/m…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-20763

    In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-boun…

    gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2018-7752

    GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different…

    gpac gpac Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2018-7752
  • report
    https://ubuntu.com/security/CVE-2018-13005
  • report
    https://ubuntu.com/security/CVE-2018-13006
  • report
    https://ubuntu.com/security/CVE-2018-20760
  • report
    https://ubuntu.com/security/CVE-2018-20761
  • report
    https://ubuntu.com/security/CVE-2018-20762
  • report
    https://ubuntu.com/security/CVE-2018-20763
  • report
    https://ubuntu.com/security/CVE-2018-1000100