650 matches found
CVE-2022-43045
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gfdumpvrmlsffield at /scenemanager/scenedump.c...
CVE-2022-29537
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-45202
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimCboxread at isomedia/boxcode3gpp.c...
CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...
CVE-2022-24577
GPAC 1.0.1 is affected by a NULL pointer dereference in gfutf8wcslen. gfutf8wcslen is a renamed Unicode utf8wcslen function...
CVE-2022-3957
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svgparsepreserveaspectratio of the file scenegraph/svgattributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the...
CVE-2021-30019
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
CVE-2021-32136
Heap buffer overflow in the printudta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-36412
A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...
CVE-2021-36417
A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gfisomdoviconfigget function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file...
CVE-2021-33364
Memory leak in the defparentboxnew function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-32437
The gfhinterfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-32134
The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-30020
In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...
CVE-2021-45260
A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsrreadid.part function, which causes a segmentation fault and application crash...
CVE-2021-46042
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the fseeko function, which causes a Denial of Service...
CVE-2021-46313
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46040
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplaceshiftmoovmetaoffsets function, which causes a Denial of Servie context-dependent...