PT-2023-17149 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incident...

PT-2023-21689 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.2.2 Description: The issue is related to a Divide By Zero error in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2023-22549 · Gpac +3 · Gpac +3

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to an unchecked return value in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2019-5481

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for szLineConv. This can potentially...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

PT-2020-6620

Name of the Vulnerable Software and Affected Versions gpac versions prior to 1.0.1 Description The issue is related to a buffer overflow vulnerability in the gf fprintf function in os file.c of the gpac multimedia platform. This vulnerability allows attackers to execute arbitrary code, potentiall...

PT-2020-6634 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function ilst item box dump located in box dump.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. This issue can be exploited by a remo...

PT-2022-11254 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A Segmentation fault caused by a floating point exception exists in Gpac, which causes a denial of service. This issue is related to the naludmx enqueue or dispatch function in reframe nalu.c when usin...

PT-2022-11258 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A heap use after free issue exists via the mpgviddmx process function in reframe mpgvid.c when using mp4box, causing a denial of service due to a segmentation fault. Recommendations: For Gpac versions...

PT-2022-11259 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A segmentation fault issue exists via the gf odf size descriptor function in desc private.c when using mp4box, causing a denial of service. Recommendations: For Gpac versions through 1.0.1, consider...

PT-2022-18247 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is a stack-overflow vulnerability in the gf isom get sample for movie time function of mp4box. Recommendations: For GPAC mp4box version...

PT-2022-18248 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1759-geb2d1e6dd Description: The issue is a heap-buffer-overflow vulnerability in the function gf isom apple enum tag. This vulnerability can be exploited, but no specific details about the estimated number of...

PT-2022-18249 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is related to a use-after-free vulnerability in the gf node get attribute by tag function. This vulnerability can lead to memory corruption and potentially allow a...

PT-2022-18250 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1663-g881c6a94a-master Description: The issue is related to an Integer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2022-26724 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions 2.1-DEV-rev368-gfd054169b-master Description: A heap buffer overflow issue was discovered via the function FixSDTPInTRAF at isomedia/isom intern.c. This issue affects GPAC and is related to a heap buffer overflow. Recommendation...

PT-2022-26726 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf isom get meta item info at /isomedia/meta.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, as...

PT-2022-26727 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf dump vrml sffield at /scene manager/scene dump.c. This issue was identified through the National Vulnerability...

PT-2022-5597 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC affected versions not specified Description: The issue is related to the function svg parse preserveaspectratio of the SVG Parser component in the GPAC multimedia platform. It is caused by incorrect clearing or freeing of resources,...

PT-2023-15162 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow that occurs via the gf vvc read sps bs internal function in the media tools/av parsers.c file. This function is part of the GPAC MP4box, whic...

PT-2023-15167 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Null pointer dereference in the m2tsdmx declare pid function, located in filters/dmx m2ts.c:343. This problem can be exploited via the m2tsdmx declare pid...