Описание
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gpac | fixed | 1.0.1+dfsg1-2 | package | |
| gpac | no-dsa | buster | package | |
| gpac | no-dsa | stretch | package | |
| ccextractor | fixed | 0.93+ds2-1 | package | |
| ccextractor | no-dsa | bullseye | package | |
| ccextractor | no-dsa | buster | package |
Примечания
https://github.com/gpac/gpac/issues/1272
https://github.com/gpac/gpac/commit/c26b0aa605aaea1f0ebe8d21fe1398d94680adf7 (v0.9.0-preview~20)
EPSS
Связанные уязвимости
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
Уязвимость функции gf_odf_del_ipmp_tool компонента odf_code.c мультимедийной платформы GPAC, позволяющая нарушителю получить доступ к конфиденциальным данным, а также вызвать отказ в обслуживании
EPSS