CVE-2020-35982

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom_hinter.c.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/gpac/gpac/commit/a4eb327049132359cae54b59faec9e2f14c5a619Patch, Third Party Advisory
https://github.com/gpac/gpac/issues/1660Exploit, Third Party Advisory
https://github.com/gpac/gpac/commit/a4eb327049132359cae54b59faec9e2f14c5a619Patch, Third Party Advisory
https://github.com/gpac/gpac/issues/1660Exploit, Third Party Advisory

Timeline

Published: Apr 21, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-359845.4A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execu CVE-2020-359855.4A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execu CVE-2020-359865.4A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers t CVE-2020-359875.4A stored cross site scripting (XSS) vulnerability in the 'Entities List' feature of Rukovoditel 2.7.2 allows authenticated attackers to exec CVE-2020-35996.1A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, re CVE-2020-359905.5Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, a CVE-2020-359926.5Fiserv Prologue through 2020-12-16 does not properly protect the database password. If an attacker were to gain access to the configuration CVE-2020-36007.8A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root on the underlying operat CVE-2020-360027.5Seat-Reservation-System 1.0 has a SQL injection vulnerability in index.php in the id parameter where attackers can obtain sensitive database CVE-2020-360037.5The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to ret CVE-2020-360046.5AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database informatio CVE-2020-360056.5AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.