Buffer Overflow in GPAC MP4Box Affects Multiple Versions
CVE-2018-20762

7.8HIGH

Key Information:

Vendor: Gpac Project
Status: Gpac
Vendor: CVE Published:; 6 February 2019

🔔 Create Gpac Project Vulnerability Alert

What is CVE-2018-20762?

The buffer overflow vulnerability in GPAC’s MP4Box, found in versions 0.7.1 and earlier, is triggered by the cat_multiple_files function when processing local directories with specially crafted filenames. This flaw can lead to potential exploitation, allowing an attacker to execute arbitrary code or cause a denial of service. Users of affected versions should consider applying security updates and patches to mitigate any risks associated with this vulnerability.