CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

UBUNTU-CVE-2021-31254

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31254

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31254

CVE-2021-31254 describes a buffer overflow in GPAC’s MP4Box tenc_box_read function (GPAC 1.0.1). A crafted file with related invalid IV sizes can cause a denial of service or allow execution of arbitrary code. The vulnerability is tied to GPAC 1.0.1; no other product/version details are provided ...

CVE-2021-31262

GPAC 1.0.1 has a NULL pointer dereference in AV1_DuplicateConfig that can be triggered by a crafted MP4Box file, leading to denial of service. This CVE (CVE-2021-31262) is reported across multiple sources (NVD entry and CNVD/OSV/Gentoo advisories) with the same root cause. Affected component: GPA...

CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31258

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31257

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31258

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31254

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31259

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31262

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the HintFile function in GPAC version 1.0.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of service...

CVE-2021-29458 Out-of-bounds read in Exiv2::Internal::CrwMap::encode

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

SUSE: Security Advisory (SUSE-SU-2021:0528-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...