CVE-2021-32270

CVE-2021-32270 affects the gpac multimedia framework (up to 20200801). The vulnerability is a NULL pointer dereference in the function vwid_box_del located in box_code_base.c , which can be exploited to cause a Denial of Service . The provided documents confirm the vulnerable component and root c...

CVE-2021-32270

Removed by vendor...

CVE-2021-32269

Removed by vendor...

CVE-2021-32271: Out-of-bounds Write

An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odfdump.c. It allows an attacker to cause code Execution...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

CVE-2021-32269: NULL Pointer Dereference

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilstitemboxdump located in boxdump.c. It allows an attacker to cause Denial of Service...

CVE-2021-32268: Out-of-bounds Write

Buffer overflow vulnerability in function gffprintf in osfile.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1...

gpac 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the ilstitemboxdump function in boxdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-32270: NULL Pointer Dereference

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...

gpac 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gffprintf function in osfile.c in GPAC 20200801 and earlier versions is vulnerable to a buffer overflow. An attacker could exploit this vulnerability to execute arbitrary code...

gpac:fuzz_parse: Crash in gf_free

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4780342062481408 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002898dc9 Crash State: gffree...

GPAC null pointer dereference vulnerability (CNVD-2021-79762)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomvpconfigget function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

GPAC null pointer dereference vulnerability (CNVD-2021-79753)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfodfdesccopy function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

GPAC Memory Leak Vulnerability (CNVD-2021-79763)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the infeboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC Memory Leak Vulnerability (CNVD-2021-79761)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the afraboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC null pointer dereference vulnerability (CNVD-2021-79760)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the DumpTrackInfo function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in t...

GPAC Memory Leak Vulnerability (CNVD-2021-79757)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomoinfreadentry function in MP4Box in GPAC version 1.0.1 is vulnerable to a memory leak. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC Heap Buffer Overflow Vulnerability (CNVD-2021-79754)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. a heap buffer overflow vulnerability exists in the URLGetProtocolType function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or...

GPAC null pointer dereference vulnerability (CNVD-2021-79755)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. abstboxsize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box comma...

GPAC Memory Leak Vulnerability (CNVD-2021-79759)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the defparentboxnew function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...