CVE-2018-13006

Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1

Description: A heap-based buffer over-read issue exists in the hdlr dump function, located in the isomedia/box dump.c file. This issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations: For GPAC version 0.7.1, consider restricting access to the hdlr dump function in the isomedia/box dump.c file as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.