34 matches found
CVE-2025-15668 GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow
A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpddelentry of the file src/isomedia/boxcodebase.c of the component MP4Box. Such manipulation of the argument data leads to heap-based buffer overflow. Local access is required to approach this attack. The...
CVE-2026-8124: Allocation of Resources Without Limits or Throttling
A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
Denial Of Service
libgpac.so is vulnerable to Denial Of Service. The vulnerability is due to improper bound check in the cttsboxread function in src/isomedia/boxcodebase.c. This issue can be exploited by an attacker to cause Denial of Service...
CVE-2023-47465
An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...
CVE-2023-47465
An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service DoS via the cttsboxread function of file src/isomedia/boxcodebase.c...
Denial Of Service (DoS)
libgpac.so is vulnerable to Denial Of Service DoS. The vulnerability arises from an out-of-bound read in the chnlboxread function of boxcodebase.c. This occurs because the variable ptr-layout.channelscount can exceed the actual number of layouts in ptr-layout.layouts and surpass the maximum numbe...
Denial Of Service (DoS)
libgpac.so is vulnerable to denial of service.The vulnerability exists due to the buffer over read in GFErr xtraboxread function in boxcodebase.c, which allows an attacker to crash the application by providing a malicious input...
NULL Pointer Dereference
libgpac.so is vulnerable to null pointer dereference. Insufficient sanitations in gitnboxdel function in boxcodebase.c allow remote attackers to cause null pointer deferences resulting in denial of service conditions...
CVE-2022-24249
A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtraboxwrite function in /boxcodebase.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871...
CVE-2021-32270
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...
CVE-2021-32270: NULL Pointer Dereference
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...
GPAC Heap Buffer Overflow Vulnerability (CNVD-2021-82981)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. a heap buffer overflow vulnerability exists in the strdup function in boxcodebase.c in GPAC version 0.8.0. No details of the vulnerability are currently available...
CVE-2020-19750
An issue was discovered in gpac 0.8.0. The strdup function in boxcodebase.c has a heap-based buffer over-read...
GPAC 缓冲区错误漏洞
GPAC is a multimedia framework for rich media and distributed under the LGPL license. a heap buffer overflow vulnerability exists in the strdup function in boxcodebase.c in GPAC version 0.8.0. No details of the vulnerability are currently available...
CVE-2020-19750: Out-of-bounds Read
An issue was discovered in gpac 0.8.0. The strdup function in boxcodebase.c has a heap-based buffer over-read...
CVE-2020-11558
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...
Design/Logic Flaw
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...