Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a Null Pointer Dereference, when gffilterpckgetdata is called...

PT-2021-6763

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. It involves an integer overflow vulnerability due to unchecked...

PT-2021-6762

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality, where a specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic. This results in a...

PT-2021-6467

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the absence of result checking for an arithmetic operation in the pcrb decoder functionality of the GPAC multimedia platform's MPEG-4 decoding. This...

PT-2021-6772

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer overflow vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked...

PT-2021-6573

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An integer overflow vulnerability exists within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic,...

PT-2021-6776

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer truncation vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause improper memory allocation, resultin...

PT-2021-6482

Name of the Vulnerable Software and Affected Versions GPAC versions 1.0.1 Description The issue is related to the co64 decoder functionality in the GPAC multimedia platform, specifically in the MPEG-4 decoding. It involves incorrect checking of the result of an arithmetic operation, which can lea...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5982417379786752 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f556c0a29d0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

gpac:fuzz_parse: Stack-use-after-return in on_aom_av1_eos

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5111254667624448 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-use-after-return WRITE 4 Crash Address: 0x7f3ff0361038 Crash State:...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS. The vulnerability exists through the dumpisomsdp function in filedump.c...

Out-of-Bounds Read

gpac is vulnerable to out-of-bounds read. The vulnerability exists due to a heap-based buffer over-read...

Buffer Over-read

gpac:bullseye is vulnerable to buffer over-read. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read.gpac:bullseye...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function nhmldumpsendheader in writenhml.c an attacker to crash the application...

PT-2021-6511

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a stack buffer overflow in the hevc parse vps extension function in MP4Box, a component of the GPAC multimedia platform. This allows attackers to cause a denial of service or execute...

PT-2021-6470 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom get root od function of the MP4Box component in the GPAC multimedia platform. This allows a remote attacker to access confidential data by using a specially...

PT-2021-6604

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf media export filters function in the MP4Box command of the GPAC multimedia platform, which is associated with NULL pointer dereference errors. This allows a remote attacker to cause...

PT-2021-6605

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the Media RewriteODFrame function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote...