CVE-2018-20762

HIGH 7.8CVE-2018-20762 · Published 06/02/2019 · updated 17/06/2026

In short

CVE-2018-20762 is a HIGH (CVSS 7.8) vulnerability affecting gpac (gpac project).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
gpac gpac_project	`≤ 0.7.1`	No fix yet

Description

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.

References

gpac/gpac commit 35ab447 · Patch
gpac/gpac · Exploit
lists.debian.org/debian-lts-announce/2019/02/msg00040.html · Mailing List
usn.ubuntu.com/3926-1 · Third Party Advisory

More vulnerabilities in gpac

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free