CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide when to make gf_isom_box_del calls. This leads to various use-after-free outcomes involving mdia_Read, gf_isom_delete_movie, and gf_isom_parse_movie_boxes.

• CWE-416

• https://github.com/gpac/gpac/commit/6063b1a011c3f80cee25daade18154e15e4c058cPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1440Exploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/6063b1a011c3f80cee25daade18154e15e4c058cPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1440Exploit, Third Party Advisory

Published

Apr 5, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11552An elevation of privilege vulnerability exists in ManageEngi…9.8
• CVE-2020-11553An issue was discovered in Castle Rock SNMPc Online 12.10.10…8.8
• CVE-2020-11554An issue was discovered in Castle Rock SNMPc Online 12.10.10…7.5
• CVE-2020-11555An issue was discovered in Castle Rock SNMPc Online 12.10.10…7.5
• CVE-2020-11556An issue was discovered in Castle Rock SNMPc Online 12.10.10…5.4
• CVE-2020-11557An issue was discovered in Castle Rock SNMPc Online 12.10.10…7.5
• CVE-2020-1156An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11560NCH Express Invoice 7.25 allows local users to discover the …7.8
• CVE-2020-11561In NCH Express Invoice 7.25, an authenticated low-privilege …8.8
• CVE-2020-11565An issue was discovered in the Linux kernel through 5.6.2. m…6
• CVE-2020-1157An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11576Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a use…5.3