CVE-2021-32138: NULL Pointer Dereference

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32139: NULL Pointer Dereference

The gfisomvpconfigget function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-6556

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf isom vp config get function in the MP4Box command of the GPAC multimedia platform. It is associated with NULL pointer dereference errors. Exploitation of this issue allows a remote...

CVE-2021-33361

CVE-2021-33361 affects GPAC’s MP4Box (GPAC 1.0.1) with a memory leak in afra_box_read that allows memory read via a crafted file. Connected sources confirm GPAC as the vulnerable component and describe the underlying issue and potential impact as memory leakage, with multiple advisories noting mi...

CVE-2021-33363

GPAC (MP4Box) vulnerability CVE-2021-33363 due to a memory leak in infe_box_read in version 1.0.1. This could allow memory reads via a crafted file. Public disclosures place affected packages in GPAC 1.0.1; Debian and Gentoo advisories recommend upgrading to fixed releases (Debian: 1.0.1+dfsg1-4+...

CVE-2021-33364

CVE-2021-33364 affects GPAC 1.0.1 where a memory leak in the def_parent_box_new function of MP4Box can allow reading memory via a crafted file. The vulnerability is documented across multiple sources (including NVD and CNVD) and has been acknowledged in Debian's gpac security advisory, which note...

CVE-2021-33365

GPAC 1.0.1 is affected by CVE-2021-33365: a memory leak in gf_isom_get_root_od() inside MP4Box can be exploited by a crafted file to read memory. Debian advisory confirms fixes in gpac 1.0.1+dfsg1-4+deb11u2; other sources (CNVD) corroborate GPAC memory-leak/vulnerability. Impact is partial confid...

CVE-2021-33366

GPAC 1.0.1 MP4Box contains a memory leak in gf_isom_oinf_read_entry that can allow memory reading via a crafted file. Public reports reference CVE-2021-33366 and describe impact as memory leak with potential disclosure. Debian advisory DSA-5411-1 fixes multiple GPAC issues (including CVE-2021-333...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the afraboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

CVE-2021-32137: Out-of-bounds Write

Heap buffer overflow in the URLGetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-32136: Out-of-bounds Write

Heap buffer overflow in the printudta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-32134: NULL Pointer Dereference

The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-33363: Missing Release of Memory after Effective Lifetime

Memory leak in the infeboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-33364: Missing Release of Memory after Effective Lifetime

Memory leak in the defparentboxnew function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-32132: NULL Pointer Dereference

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-33366

Removed by vendor...

CVE-2021-33364

Removed by vendor...

PT-2021-6577

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a heap buffer overflow in the print udta function in MP4Box, part of the GPAC multimedia platform. This allows attackers to cause a denial of service or potentially execute arbitrary code...

PT-2021-6581

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a heap buffer overflow in the URL GetProtocolType function of the MP4Box command in the GPAC multimedia platform. This can be exploited by a remote attacker using a specially crafted file,...

PT-2021-6574

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the abst box size function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote attacke...