Remote Yes

Type Arbitrary code execution

Description

An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an attacker to cause code execution.

AVG-1856 gpac 1:1.0.0-1 1:1.0.1-1 Medium Fixed

https://github.com/gpac/gpac/issues/1575
https://github.com/gpac/gpac/commit/71f1d75eaf71f47944ddbd9356fb498ca252b19a