CVE-2024-6062: NULL Pointer Dereference

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swfsvgaddisosample of the file src/filters/loadtext.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_odf_vvc_cfg_write_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5967890988728320 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x506000001208 Crash State:...

gpac:fuzz_probe_analyze: Crash in gf_list_count

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4840009390686208 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001010009 Crash State: gflistcount...

gpac:fuzz_probe_analyze: Crash in gsfdmx_read_prop

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5737598801739776 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x502100000def Crash State: gsfdmxreadpro...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in swf_def_bits_jpeg

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6201254983303168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000016d1 Crash State:...

gpac:fuzz_probe_analyze: Crash in gsfdmx_read_prop

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6571312408494080 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x602100000e4f Crash State: gsfdmxreadpro...

gpac:fuzz_route: Heap-use-after-free in gf_netcap_load_pck

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5073863747633152 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6120000006b8 Crash State:...

ROS-20240412-05

A vulnerability in the gfisomnewgenericsampledescription function of the GPAC multimedia platform is related to the buffer copying without checking the input size. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

gpac/src/filter_core/filter.c Heap Buffer Overflow DoS

The vulnerability of the gffilterpacketdel function in the gpac/src/filtercore/filter.c file of the multimedia platform GPAC is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

NewSFDouble file GPAC DoS

The vulnerability of the NewSFDouble function in the Scenegraph/vrmltools.c file of the GPAC multimedia platform is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability may allow an attacker to cause a service failure...

gf_mpd_resolve_url Heap Buffer Overflow DoS

The vulnerability of the gfmpdresolveurl function in the mediatools/mpd.c file of the multimedia platform GPAC is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

GPAC Code Execution

The vulnerability in the src/mediatools/avilib.c file of the multimedia platform GPAC is related to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ROS-20240408-04

Vulnerability of cttsboxread function of Golang programming language is related to resource release errors. resources. Exploitation of the vulnerability may allow an attacker to cause a denial of service A vulnerability in the file src/mediatools/avilib.c of the GPAC multimedia platform, is relat...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in inspect_dump_mpeg124

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5024230379945984 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000f9c...

ROS-20240405-11

Vulnerability of the flushrefsamples function of the GPAC multimedia platform is related to incorrect use of dynamic memory during program operation. use of dynamic memory during program operation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

gpac:fuzz_route: Heap-buffer-overflow in default_log_callback_color

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4630848151289856 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x611000042641 Crash State:...

gpac:fuzz_route: Heap-buffer-overflow in gf_route_dmx_process_service_signaling

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5054025641820160 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x602000000dd1 Crash State:...

gf_mpd_parse_string Heap Buffer Overflow DoS

The vulnerability of the gfmpdparsestring function mediatools/mpd.c:75 in the GPAC multimedia platform is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

GPAC ExtractAttributes Function Heap Buffer Overflow DoS

The vulnerability of the ExtractAttributes function mediatools/m3u8.c:329 of the multimedia platform GPAC is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow a malicious actor to cause service failure...

gpac:fuzz_probe_analyze: Crash in gsfdmx_demux

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4786613394669568 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x609100003d3f Crash State: gsfdmxdemux...