Vulnerabilities > CVE-2019-20169 - Use After Free vulnerability in Gpac 0.8.0/0.9.0

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
gpac
CWE-416
NVD
Published: 2019-12-31
Updated: 2020-01-02

Summary

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c.

Vulnerable Configurations

Part Description Count
Application
Gpac
2

Common Weakness Enumeration (CWE)

References