tocsin

Debian/gpac: high 8.8

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts”

Action: Upgrade gpac to 1.0.1+dfsg1-4+deb11u1 or later.

Affected

introducedfixedlast affected
01.0.1+dfsg1-4+deb11u1-

Fixed versions

1.0.1+dfsg1-4+deb11u1

Sources

published · modified · JSON