PatchTheCVEgpac project vulnerabilities
Recent CVEs affecting gpac project products. 4 tracked.
gpac project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-02-06. Highest priority: CVE-2018-20762 (score 56/100).
- CVE-2018-20763 HIGH 7.8 UPGRADE MITIGATE In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an ou
- CVE-2018-20762 HIGH 7.8 UPGRADE MITIGATE GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in appli
- CVE-2018-20761 HIGH 7.8 UPGRADE MITIGATE GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_ma
- CVE-2018-1000100 HIGH 7.8 UPGRADE MITIGATE GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avc_ext.c lines
FAQ
How do I fix gpac project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gpac project being exploited right now?
None of the tracked gpac project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gpac project CVE should I patch first?
CVE-2018-20762 currently ranks highest (56/100): GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in appli.