VYPR
← All advisories
Critical severity9.8OSV Advisory· Published Jun 29, 2018· Updated Jun 17, 2026

CVE-2018-13005

CVE-2018-13005

Description

An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Gpac/GpacOSV3 versions
    v0.5.2, v0.6.0, v0.7.0, …+ 2 more
    • (no CPE)range: v0.5.2, v0.6.0, v0.7.0, …
    • cpe:2.3:a:gpac:gpac:0.7.1:*:*:*:*:*:*:*
    • (no CPE)range: =0.7.1
  • Canonical/Ubuntu Linux3 versions
    cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.