CVE-2019-20159: Medium severity gpac mp4box vulnerability
Published Dec 30, 2019
·Updated
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew() in isomedia/boxcodebase.c.
Affected Software
2 affected components
Gpac GPAC=0.8.0
Gpac GPAC=0.9.0
Event History
Dec 30, 2019
CVE Published
via MITRE·11:57 PM
Data Sourced
via MITRE·11:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-20159?
CVE-2019-20159 has been assigned a moderate severity level due to its potential for causing application instability.
2
How do I fix CVE-2019-20159?
To fix CVE-2019-20159, upgrade to a version of GPAC that is not affected, beyond version 0.9.0-development-20191109.
3
What does CVE-2019-20159 impact?
CVE-2019-20159 impacts GPAC versions 0.8.0 and 0.9.0-development-20191109, causing a memory leak.
4
How was CVE-2019-20159 discovered?
CVE-2019-20159 was discovered during routine analysis of GPAC's source code, identifying a memory leak in specific functions.
5
Is there a workaround for CVE-2019-20159?
There are no known workarounds for CVE-2019-20159, and it's recommended to update the software to a patched version.