New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[GHSA-cpr6-m3jw-f6x2] dimC_Read in isomedia/box_code_3gpp.c in GPAC 0.8.0 has a... #5331

Closed

Crispy-fried-chicken wants to merge 1 commit into Crispy-fried-chicken/advisory-improvement-5331 from Crispy-fried-chicken-GHSA-cpr6-m3jw-f6x2

Crispy-fried-chicken commented Mar 3, 2025

Updates

Affected products
Description
Summary

Comments
Affected GPAC version should be &gt v0.5.2 &lt 0.8.0
According to the description of the CVE-2019-20208(issue gpac/gpac#1348), the GPAC affected version of the vulnerability is 0.8.0 . However, based on the vulnerability code snippet, the earlist version is
v0.5.2(https://github.com/gpac/gpac/blob/v0.5.2/src/isomedia/box_code_3gpp.c).
Please confirm.
code snippet

while (1) {
            str[i] = gf_bs_read_u8(bs);
            if (!str[i]) break;

thank you!


          Improve GHSA-cpr6-m3jw-f6x2

9f14731

github-actions bot changed the base branch from main to Crispy-fried-chicken/advisory-improvement-5331

March 3, 2025 08:24

Contributor

shelbyc commented Mar 3, 2025

Closed per #5327 (comment)

shelbyc closed this

github-actions bot deleted the Crispy-fried-chicken-GHSA-cpr6-m3jw-f6x2 branch

March 3, 2025 13:27

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet