CVE-2020-19488

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-19488

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-19488.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-19488

Downstream

Published

2021-07-21T18:15:08Z

Modified

2026-08-03T14:24:18Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:gpac:gpac:0.8.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "0.8.0"
                },
                {
                    "last_affected":  "0.8.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "gpac:gpac"
        }
    ]
}

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type

GIT

Repo

https://github.com/gpac/gpac

Events

Introduced

Fixed

6170024568f4dda310e98ef7508477b425c58d09

Database specific

Show details

{
    "source":  "REFERENCES"
}

Affected versions

v0.*

v0.5.2

v0.6.0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-19488.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "76557726008365586309866346198720532336",
            "length":  1729
        },
        "id":  "CVE-2020-19488-15bb639f",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/gpac/gpac/commit/6170024568f4dda310e98ef7508477b425c58d09",
        "target":  {
            "file":  "src/isomedia/box_code_apple.c",
            "function":  "ilst_item_box_read"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "93052003416229134326844688799505428902",
                "137638215521662659213169629412788171523",
                "218856652493421116641591856317043504045",
                "215335284481261113098767767928878411580",
                "300668904883607872971667183085576413148",
                "130934968920720747450702108576285489587",
                "313525340958840565967647329992440436085",
                "324483646226687389449473943369863747743"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2020-19488-af8e27b5",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/gpac/gpac/commit/6170024568f4dda310e98ef7508477b425c58d09",
        "target":  {
            "file":  "src/isomedia/box_code_apple.c"
        }
    }
]

vanir_signatures_modified

"2026-08-03T14:24:18Z"