Описание
A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.
Ссылки
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gpac:gpac:2.4:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00467
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
ubuntu
3 месяца назад
A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.
CVSS3: 7.5
debian
3 месяца назад
A segmentation violaton in the gf_hevc_read_sps_bs_internal function ( ...
CVSS3: 7.5
github
3 месяца назад
A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.
EPSS
Процентиль: 39%
0.00467
Низкий
7.5 High
CVSS3
Дефекты
CWE-400