| Package | Affected versions | Patched versions |
|---|---|---|
| gpac | ≥ 0.5.2, ≤ 1.0.1 |
There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free