CVE-2020-19481

GPAC (before 0.8.0) is affected by CVE-2020-19481 due to an invalid memory read in gf_m2ts_process_pmt (media_tools/mpegts.c) that can cause a denial of service when processing a crafted MP4. Affected products: GPAC prior to 0.8.0; vulnerability details are documented across multiple feeds, and r...

CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Gpac MP4Box 代码问题漏洞

GPAC MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.GPAC MP4Box version 0.8.0 has a security vulnerability, which stems from an issue found in...

PT-2021-6487

Name of the Vulnerable Software and Affected Versions Gpac MP4Box version 0.8.0 Description The issue is related to an invalid read in the ilst item Read function, located in the box code apple.c component of the GPAC multimedia platform. This can lead to a Denial of Service. The vulnerability is...

CVE-2020-19488: NULL Pointer Dereference

An issue was discovered in boxcodeapple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilstitemRead...

CVE-2020-19481: Out-of-bounds Read

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6339950181220352 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7efeb73f3440 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

PT-2021-6489 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: gpac version 0.8.0 Description: An issue was discovered in the strdup function in box code base.c which has a heap-based buffer over-read. This is related to incorrect handling of a filled string without a x00 character. Exploitation of this...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5970298926137344 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f20cc351440 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

Denial of service(DoS) in GPAC version 0.8.0

In GPAC GPAC version 0.8.0 a Denial of serviceDoS exists in the GPAC 0.8.0-e10d39d-master branch that can be attacked via a malicious image file resulting in DoS. An attacker can exploit this vulnerability by submitting a malicious media file that exploits this issue. This will result in a Denial...

GSD-2021-1000000 Denial of service(DoS) in GPAC version 0.8.0

In GPAC GPAC version 0.8.0 a Denial of serviceDoS exists in the GPAC 0.8.0-e10d39d-master branch that can be attacked via a malicious image file resulting in DoS. An attacker can exploit this vulnerability by submitting a malicious media file that exploits this issue. This will result in a Denial...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. The function gfhevcreadppsbsinternal function in mediatools/avparsers.c causes a loop when a malicious file, pps-numtilecolumns larger than sizeofpps-columnwidth results in a heap overflow in the loop...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The function filtercore/filterpck.c:gffilterpcknewallocinternal allows attackers to cause a denial of service via a NULL pointer dereference...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. In the adtsdmxprocess function in filters/reframeadts.c , a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

Information Disclosure

gpac is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by reading memory via a crafted file in the MP4Box command via the gfhintertracknew function...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The MergeTrack function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The HintFile function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the abstboxread function in MP4Box in GPAC...

Denial Of Service (DoS)

gpac:sid is vulnerable to Denial Of Service DoS. There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. An invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c allows an attacker to execute arbitrary code on the host OS...