CVE-2020-19488

Name of the Vulnerable Software and Affected Versions Gpac MP4Box version 0.8.0

Description The issue is related to an invalid read in the ilst item Read function, located in the box code apple.c component of the GPAC multimedia platform. This can lead to a Denial of Service. The vulnerability is associated with pointer dereference errors. An attacker can exploit this vulnerability to cause a disruption in service.

Recommendations For Gpac MP4Box version 0.8.0, consider disabling the ilst item Read function as a temporary workaround until a patch is available. Restrict access to the box code apple.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.