240 matches found
CVE-2021-40592
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a version v1.0.1 onwards contains loop with unreachable exit condition 'infinite loop' vulnerability in ISOBMFF reader filter, isoffinread.c. Function isoffinprocess can result in DoS by infinite loop. To exploit, the victim must...
CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...
PT-2022-19687 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 2.0.0 Description: The issue is related to a heap-based buffer over-read in the gp rtp builder do hevc function, located in the ietf/rtp pck mpeg4.c file. This problem is demonstrated by MP4Box. Recommendations: For GPAC version...
UBUNTU-CVE-2022-24577
GPAC 1.0.1 is affected by a NULL pointer dereference in gfutf8wcslen. gfutf8wcslen is a renamed Unicode utf8wcslen function...
CVE-2022-24575
GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...
CVE-2022-26967
GPAC 2.0 allows a heap-based buffer overflow in gfbase64encode. It can be triggered via MP4Box...
CVE-2021-46311
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...
UBUNTU-CVE-2021-46311
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...
DEBIAN-CVE-2021-45767
GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsrreadid. This vulnerability can lead to a Denial of Service DoS...
PT-2022-12393 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: The issue is related to an invalid call in the gf node changed function, which can lead to a Denial of Service DoS. Recommendations: For GPAC version 1.1.0, consider disabling the gf node changed function as a...
CVE-2021-40575
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmxprocess function in reframempgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566...
PT-2022-11264 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free bug in the av1dmx finalize function in reframe av1.c, which can cause a denial of service. This bug allows attackers to exploit the vulnerability, leading to a service...
CVE-2021-46051
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the MediaIsSelfContained function, which could cause a Denial of Service...
DEBIAN-CVE-2021-46051
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the MediaIsSelfContained function, which could cause a Denial of Service...
CVE-2021-46049
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gffileiocheck function, which could cause a Denial of Service...
DEBIAN-CVE-2021-46047
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gfhinterfinalize function...
UBUNTU-CVE-2021-46046
A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gfisomboxsize function, which could cause a Denial of Service context-dependent...
GPAC 安全漏洞
GPAC is an open source multimedia framework. version 1.0.1 of GPAC contains a security vulnerability that stems from the existence of a context-dependent abort failure in MP4Box, which could be exploited by an attacker to cause a denial of service...