CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type: GIT
Repo: https://github.com/gpac/gpac
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4c1360818fc8948e9307059fba4dc47ba8ad255d

Affected versions

v0.*

v0.5.2

v0.6.0

v0.6.1

v0.7.0

v0.7.1

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/gpac/gpac/commit/4c1360818fc8948e9307059fba4dc47ba8ad255d",
        "signature_version": "v1",
        "target": {
            "file": "src/media_tools/text_import.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "166482483231269289728412799493455409256",
                "294305885484496685493816442798177987069",
                "339237291132411872005631746324972709639",
                "275142320839685856229007254720329448643"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "id": "CVE-2018-20760-0f0f89f8"
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4c1360818fc8948e9307059fba4dc47ba8ad255d",
        "signature_version": "v1",
        "target": {
            "file": "src/media_tools/text_import.c",
            "function": "gf_text_get_utf8_line"
        },
        "digest": {
            "length": 1613.0,
            "function_hash": "99797345829505119259293328342837626094"
        },
        "deprecated": false,
        "signature_type": "Function",
        "id": "CVE-2018-20760-5f3fa077"
    }
]