Heap Buffer Overflow in GPAC MP4Box

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by analyzing the behavior of GPAC MP4Box when processing MP4 files, especially crafted files containing corrupted sample-size (stsz) data for an Opus track.

AddressSanitizer was used to detect the heap buffer overflow, reporting errors during parsing in the gf_opus_parse_packet_header function.

To detect the vulnerability on your system, you can run MP4Box with AddressSanitizer enabled on suspicious or untrusted MP4 files to observe any heap buffer overflow errors.

• Compile GPAC MP4Box with AddressSanitizer enabled (e.g., using GCC or Clang with -fsanitize=address).
• Run a command like: `ASAN_OPTIONS=detect_leaks=0 ./MP4Box -info crafted_file.mp4` to trigger parsing and detect memory errors.
• Monitor logs or AddressSanitizer output for heap buffer overflow reports related to gf_opus_parse_packet_header.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should avoid processing untrusted or crafted MP4 files with vulnerable versions of GPAC MP4Box.

Update GPAC MP4Box to a version that includes the fix for this vulnerability, specifically versions including or after the commit `61bbfd2e89553373ba3449b8ec05b5f098d732a5`.

If an immediate update is not possible, consider restricting access to MP4Box or sandboxing its execution to limit potential damage from Denial of Service attacks.

• Do not open or process MP4 files from untrusted sources until patched.
• Apply the official patch or upgrade to a fixed version of GPAC MP4Box.
• Use runtime protections such as AddressSanitizer during testing to detect exploitation attempts.

Useful 0 Not Useful 0

Executive Summary

This vulnerability is a heap buffer overflow found in the function gf_opus_parse_packet_header within the media_tools/av_parsers.c file of GPAC MP4Box version 2.4. It occurs when the software processes a specially crafted MP4 file, which can cause the program to behave unexpectedly.

Specifically, the overflow happens in the heap memory area, which can lead to memory corruption.

Useful 0 Not Useful 0

Impact Analysis

An attacker exploiting this vulnerability can cause a Denial of Service (DoS) condition by supplying a crafted MP4 file to GPAC MP4Box v2.4. This means the application may crash or become unresponsive, disrupting normal operations.

Useful 0 Not Useful 0