VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 24, 2020· Updated Jun 17, 2026

CVE-2019-20630

CVE-2019-20630

Description

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) in utils/bitstream.c that can cause a denial of service via a crafted MP4 file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gpac/Gpac2 versions
    cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*range: <0.8.0
    • (no CPE)range: <0.8.0
  • GPAC/libgpac.adescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.