First published: Fri Apr 12 2019(Updated: )
GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GPAC MP4Box | =0.7.1 | |
Debian | =8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-11221 is classified as a high severity vulnerability due to the potential for buffer overflow leading to code execution.
To mitigate CVE-2019-11221, upgrade GPAC to version 0.7.2 or later.
CVE-2019-11221 affects GPAC version 0.7.1 and Debian Linux 8.0.
CVE-2019-11221 involves a buffer overflow issue in the gf_import_message() function located in media_import.c.
Yes, CVE-2019-11221 can be exploited remotely if an attacker can send malformed media files to the vulnerable application.