Design/Logic Flaw

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

UBUNTU-CVE-2019-20161

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...

UBUNTU-CVE-2019-20167

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...

Null pointer dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfodfavccfgwritebs in odf/descriptors.c...

UBUNTU-CVE-2019-14563

Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access...

GPAC Code Issue Vulnerability

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfodfavccfgwritebs' function in the odf/descriptors.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for ...

GPAC code issue vulnerability (CNVD-2020-00525)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfisomdump' function of the isomedia/boxdump.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for a...

GPAC code issue vulnerability (CNVD-2020-00231)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfisomboxdel' function of the isomedia/boxfuncs.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for a...

CVE-2019-20162

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

CVE-2019-20165

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...

CVE-2019-20168

Removed by vendor...

CVE-2019-20169

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

UPDATE: Empire 3.0.1

Empire 3.0.1 release was a real surprise for me as about a week ago Empire 3.0 was released. I hadn't gotten around to test it all and then we have a new release already! If you remember, I briefly mentioned about this tool in my five month old post titled - List of Open Source C2 Post-Exploitati...

PT-2019-16110 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A NULL pointer dereference issue was found in the function ilst item Read in the file isomedia/box code apple.c. This issue can cause problems when the function is called...

PT-2019-16106 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue was found in the function ReadGF IPMPX WatermarkingInit in odf/ipmpx code.c. Recommendations: For GPAC version 0.8.0, update to a version...

CVE-2019-20159: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...

GPAC code issue vulnerability (CNVD-2020-01652)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'sencParse' function of the isomedia/boxcodedrm.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109, which originates in the code of a web-based system or product Improper design or implementation durin...

GPAC code issue vulnerability (CNVD-2020-01651)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'GFIPMPXAUTHDelete' function in the odf/ipmpxcode.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109, which arises from a network system or product The vulnerability stems from an improper design or...

virglrenderer code issue vulnerability

virglrenderer is a VirGL virtual OpenGL renderer. A code issue vulnerability exists in the vrendrenderer.c file in virglrenderer 0.8.0 and earlier versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed...