CVE-2019-20630

CVE-2019-20630 is a heap-based buffer over-read vulnerability in the libgpac.a library, specifically in the BS_ReadByte function, affecting GPAC versions prior to 0.8.0. This flaw can be triggered by a specially crafted MP4 file, leading to a denial of service. Rated as Medium severity with a CVSS score of 5.5, it requires local access and user interaction (e.g., opening a malicious file) to exploit, resulting in high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.