Описание
Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| gpac | removed | package | ||
| gpac | not-affected | buster | package | |
| gpac | not-affected | stretch | package |
Примечания
https://github.com/gpac/gpac/commit/ec64c7b8966d7e4642d12debb888be5acf18efb9
https://github.com/gpac/gpac/issues/1786
Negligible security impact
Связанные уязвимости
Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
Уязвимость функции infe_box_read компонента MP4Box мультимедийной платформы GPAC, позволяющая нарушителю получить доступ к конфиденциальным данным