PT-2021-19220

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the tenc box read function in MP4Box, allowing attackers to potentially cause a denial of service or execute arbitrary code via a crafted file. This issue is related to invalid I...

PT-2021-19223

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the HintFile function. Recommendations For GPA...

PT-2021-19227

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to read memory via a crafted file in the MP4Box command, specifically through the gf hinter track new function. Recommendations For GPAC version 1.0.1, consider restricting the use of t...

PT-2021-19221

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the abst box read function within MP4Box in GPAC, allowing attackers to potentially cause a denial of service or execute arbitrary code by using a crafted file. No information is...

PT-2021-19222

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A memory leak in the stbl GetSampleInfos function in MP4Box allows attackers to read memory via a crafted file. Recommendations For GPAC version 1.0.1, at the moment, there is no information about a newer version...

PT-2021-19224

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom set extraction slc...

CVE-2021-30199: NULL Pointer Dereference

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

CVE-2021-31255: Buffer Copy without Checking Size of Input

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-30020: Out-of-bounds Write

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

CVE-2021-30019: Out-of-bounds Write

In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

CVE-2021-31257: NULL Pointer Dereference

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-29279: Integer Overflow or Wraparound

There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...

CVE-2021-31261: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31259: NULL Pointer Dereference

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-18570

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is a Null Pointer Dereference in the gf filter pck new alloc internal function, located in filter core/filter pck.c. This occurs because the ctx.opid may be NULL, causing a crash. The pid is derived fro...

PT-2021-18573

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue arises in the gf hevc read pps bs internal function, located in media tools/av parsers.c. A crafted file can cause pps-num tile columns to be larger than sizeofpps-column width, resulting in a heap...

PT-2021-18569

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to an integer overflow in the hevc parse slice segment function located in media tools/av parsers.c, which can cause a crash. Recommendations For GPAC version 1.0.1, consider applying a patch...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

CVE-2021-31254: Out-of-bounds Write

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31256: Missing Release of Memory after Effective Lifetime

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...