QwikSec

Security Database

CVE

CWE

Training

CVE-2018-21015

Published: Sep 16, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/gpac/gpac/issues/1179

x_refsource_MISC

[debian-lts-announce] 20200120 [SECURITY] [DLA 2072-1] gpac security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.