Design/Logic Flaw

Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of service...

UBUNTU-CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40573

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service...

CVE-2021-40573

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service...

CVE-2021-40573

GPAC/MP4Box (GPAC 1.0.1) is affected by CVE-2021-40573 due to a double-free in gf_list_del within list.c, leading to denial of service. The issue is confirmed across multiple sources (NVD entry for CVE-2021-40573; CNVD/OSV/CVE mirrors). Connected advisories indicate the underlying problem in the ...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from multiple memory releases by the gftextgetutf8line function in the product loadtext.c file. An attacker could cause a denial of service or even code execution and privilege escalation through...

CVE-2021-40575

GPAC 1.0.1’s MP4Box mpgviddmx_process null pointer dereference leads to DoS. CVE-2021-40575 is associated with this issue; Debian notes a fix in gpac 1.0.1+dfsg1-4+deb11u2 (Bullseye). If using affected GPAC packages, upgrade to the patched version to mitigate. The Initial description confirms the...

CVE-2021-40568

GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC, which stems from the gflistdel function in the product list.c file releasing memory multiple times. An attacker could cause a denial of service via this vulnerability...

CVE-2021-40568

A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svcparseslice function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40572

The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...

CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40570

GPAC vulnerability CVE-2021-40570 affects the MP4Box binary in GPAC 1.0.1, where a double-free in avc_compute_poc (av_parsers.c) can lead to denial of service and may allow code execution with privilege escalation. Public sources confirm the issue and its impact; Debian advisory notes fixed versi...

CVE-2021-40569

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

PT-2022-11263 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the ilst box read function in box code apple.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution and...

PT-2022-11268 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a null pointer dereference vulnerability in the gf isom get payt count function in hint track.c, which can be exploited by attackers to cause a denial of service. Recommendations: For Gp...