CVE-2021-40572

GPAC CVE-2021-40572 affects the MP4Box component in GPAC 1.0.1, with a double-free bug in av1dmx_finalize (reframe_av1.c) that can cause denial of service. Public details describe the vulnerability and some patch guidance: Debian reports fixes in GPAC 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA recommends...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40567

Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of service...

CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the gfisomgetpaytcount function in the product's hinttrack.c file. An attacker could cause a denial of service via this vulnerability...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-40571

GPAC mp4box 1.0.1 has a double-free in ilst_box_read (box_code_apple.c) that can cause denial of service and potentially code execution/privilege escalation. Debian fixes gpac to 1.0.1+dfsg1-4+deb11u2; upgrade recommended. Other connected sources corroborate GPAC vulnerabilities; no additional ex...

CVE-2021-40576

GPAC GNU GPAC 1.0.1 contains a null pointer dereference in gf_isom_get_payt_count (hint_track.c) that allows denial of service via MP4Box. The CVE-2021-40576 entry is confirmed across multiple trusted sources (NVD, CNVD, Debian DSAs) and is associated with the GPAC multimedia framework. Exploitat...

PT-2022-11262 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the avc compute poc function in av parsers.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution and...

CVE-2021-40569

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2021-40575

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmxprocess function in reframempgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566...

CVE-2021-45760

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40572

The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that stems from the function gflistlast containing an invalid memory address dereference. An attacker could exploit this vulnerability to cause a denial of service...

GPAC buffer overflow vulnerability (CNVD-2022-08468)

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 1.0.1, which stems from a heap-based buffer overflow vulnerability in MP4Box of GPAC 1.0.1, which can be exploited by an attacker to produce unspecified other impacts through files made in MP4Box commands by usin...

GPAC buffer overflow vulnerability (CNVD-2022-08469)

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that originates from a heabased buffer overflow vulnerability in MP4Box for GPAC 1.0.1, which can be exploited by an attacker to cause a denial of service or execute arbitrary code via a crafted file...