First published: Mon Dec 30 2019(Updated: )
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GPAC MP4Box | =0.8.0 | |
GPAC MP4Box | =0.9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-20159 has been assigned a moderate severity level due to its potential for causing application instability.
To fix CVE-2019-20159, upgrade to a version of GPAC that is not affected, beyond version 0.9.0-development-20191109.
CVE-2019-20159 impacts GPAC versions 0.8.0 and 0.9.0-development-20191109, causing a memory leak.
CVE-2019-20159 was discovered during routine analysis of GPAC's source code, identifying a memory leak in specific functions.
There are no known workarounds for CVE-2019-20159, and it's recommended to update the software to a patched version.