Lucene search
+L

404 matches found

Talos
Talos
added 2021/08/16 12:0 a.m.144 views

GPAC Project on Advanced Content library MPEG-4 Decoding multiple multiplication integer overflow vulnerabilities

Summary Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow...

9AI score
SaveExploits0
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.6 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.01656EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.5 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC is an open source multimedia framework. a security vulnerability exists in GPAC Project Advanced Content, which stems from the failure of the product's MPEG-4 to check the correctness of additive operations. An attacker could cause memory corruption through this vulnerability...

8.8CVSS5.7AI score0.01695EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.9 views

GPAC Project Advanced Content 安全漏洞

A security vulnerability exists in the MPEG-4 decoding functionality of the GPAC project on Advanced Content library v1.0.1, an open source multimedia framework. The vulnerability stems from the handling of the "hdlr" FOURCC code, where a carefully constructed MPEG-4 input could lead to incorrect...

8.8CVSS6AI score0.01632EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.17 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.7 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.01695EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.5 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.6 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.01703EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.5 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.01695EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.6 views

GPAC Project Advanced Content 输入验证错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.18 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.8 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project Advanced Content is an implementation of the MPEG-4 system standard, written in ANSI C. An integer overflow vulnerability exists in GPAC Project on Advanced Content, which stems from an unchecked algorithm and can be exploited by remote attackers to cause a heap buffer overflow,...

8.8CVSS6.1AI score0.01695EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.9 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.02019EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.10 views

GPAC Project Advanced Content 缓冲区错误漏洞

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced...

8.8CVSS6AI score0.0201EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/08/16 12:0 a.m.10 views

PT-2021-6554 · Gpac · Gpac Project On Advanced Content Library

Name of the Vulnerable Software and Affected Versions: GPAC Project on Advanced Content library version 1.0.1 Description: An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality. The stri box read function is used when processing atoms using the 'stri'...

9.3CVSS8.9AI score0.02019EPSS
SaveExploits24References73
ATTACKERKB
ATTACKERKB
added 2021/08/11 8:15 p.m.3 views

CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS6.6AI score0.00752EPSS
SaveExploits1References3
OSV
OSV
added 2021/08/04 9:15 p.m.6 views

DEBIAN-CVE-2020-24829

An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tssectioncomplete in mediatools/mpegts.c that can cause a denial of service DOS via a crafted MP4 file...

5.5CVSS5.9AI score0.00959EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/19 7:15 p.m.3 views

UBUNTU-CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

7.8CVSS7.6AI score0.0146EPSS
SaveExploits1References4
OSV
OSV
added 2020/04/05 8:15 p.m.3 views

DEBIAN-CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...

9.8CVSS8.6AI score0.0154EPSS
SaveExploits1References1
OSV
OSV
added 2019/12/31 12:15 a.m.2 views

DEBIAN-CVE-2019-20170

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GFIPMPXAUTHDelete in odf/ipmpxcode.c...

5.5CVSS6.2AI score0.00854EPSS
SaveExploits1References1
Rows per page
Query Builder