CVE-2019-13618: Gpac

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.

Affected products

• Gpac Gpac: before 0.8.0 (fixed in 0.8.0)

Published 2019-07-16. Last modified 2026-06-17.