GPAC integer overflow vulnerability (CNVD-2021-30183)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in the hevcparseslicesegment function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability to cause a program crash...

GPAC memory leak vulnerability (CNVD-2021-30174)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the stblGetSampleInfos function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC heap overflow vulnerability (CNVD-2021-30184)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

GPAC buffer overflow vulnerability (CNVD-2021-30173)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A buffer overflow vulnerability exists in the tencboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or execut...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30182)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the filtercore/filterpck.c:gffilterpcknewallocinternal function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30178)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomcencgetdefaultinfointernal function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial ...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30177)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomsetextractionslc function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30187)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in GPAC version 1.0.1 in filters/reframelatm.c when calling gffilterpckgetdata. An attacker could exploit this vulnerability via a specially crafted mp4 file to...

CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31258

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-31258

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-31257

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-31259

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-31262

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31259

GPAC 1.0.1 contains a NULL pointer dereference in gf_isom_cenc_get_default_info_internal triggered by a crafted MP4Box file, enabling a denial of service. Upstream Gentoo GLSA recommends upgrading to GPAC >= 2.2.0. Connected sources confirm affected version and remediation guidance.

CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the HintFile function in GPAC version 1.0.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of service...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30188)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...