CVE-2018-7752

gpac: GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a differe...

CVE-2018-7752 is fixed in 3 products on 1 platform, first by gpac 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1, released February 5, 2019. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0150
74th percentile

GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.

Where it's fixed

ProductFixed inFixReleased
Linux
gpac · Ubuntu 18.04.6 LTS (bionic) 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 gpac 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 Feb 5, 2019
gpac-modules-base · Ubuntu 18.04.6 LTS (bionic) 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 gpac-modules-base 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 Feb 5, 2019
libgpac4 · Ubuntu 18.04.6 LTS (bionic) 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 libgpac4 0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1 Feb 5, 2019