CVE-2020-19481

PoC ×3—

CVSS 3.1

5.5 medium

EPSS

1%p61

Published

Jul 21, 2021 (Jul 21, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file.

Vendors: gpac
Products: gpac
Weakness: CWE-125
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.