PT-2023-21689 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.2.2 Description: The issue is related to a Divide By Zero error in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2022-11260 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A buffer overflow issue exists via a malformed MP4 file in the svc parse slice function in av parsers.c, allowing attackers to cause a denial of service, potentially execute code, and escalate...

PT-2022-11277 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command. This is due to a problem in the gf hinter track finalize function. Recommendations: For GPAC version 1.0.1,...

PT-2022-11253 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions 1.0.1 and earlier Description: A null pointer deference issue exists via the naludmx parse nal avc function in reframe nalu, allowing a denial of service. Recommendations: For gpac versions 1.0.1 and earlier, consider disabling...

PT-2021-10987 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...

PT-2023-15166 · Unknown +2 · Gpac Mp4Box +2

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a heap use-after-free vulnerability. It occurs via the file filters/dmx m2ts.c at line 470 in the m2tsdmx declare pid function. This vulnerability can be...

PT-2023-15450 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the eac3 update channels function, located in the media tools/av parsers.c file at line 9113. This function is part of the GPAC MP4box...

PT-2023-1156 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3.0-DEV Description: The issue is related to a Use After Free condition in the gpac/gpac multimedia platform, specifically concerning the gf odf vvc cfg read bs function. This condition involves the use of memory...

PT-2023-15451 · Unknown +2 · Gpac Mp4Box +2

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8261. This function is susceptible to a buffer overflow, whi...

PT-2023-16546 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: A buffer over-read issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where th...

PT-2023-17149 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incident...

PT-2023-22549 · Gpac +3 · Gpac +3

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to an unchecked return value in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2023-16508 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to V2.1.0-DEV. Description: The issue is a Heap-based Buffer Overflow. It affects the GitHub repository gpac/gpac. Recommendations: For versions prior to V2.1.0-DEV, update to V2.1.0-DEV or later to resolve the issue...

PT-2021-10988 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function nhmldump send header located in write nhml.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For gpac versions...

PT-2022-17325 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to a NULL Pointer Dereference in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the...

PT-2022-26722 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf isom meta restore items ref at /isomedia/meta.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master...

PT-2022-11254 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A Segmentation fault caused by a floating point exception exists in Gpac, which causes a denial of service. This issue is related to the naludmx enqueue or dispatch function in reframe nalu.c when usin...

PT-2022-11259 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A segmentation fault issue exists via the gf odf size descriptor function in desc private.c when using mp4box, causing a denial of service. Recommendations: For Gpac versions through 1.0.1, consider...

PT-2022-18248 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1759-geb2d1e6dd Description: The issue is a heap-buffer-overflow vulnerability in the function gf isom apple enum tag. This vulnerability can be exploited, but no specific details about the estimated number of...

PT-2022-18250 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1663-g881c6a94a-master Description: The issue is related to an Integer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...