Lucene search
+L

7509 matches found

NVD
NVD
•added 2021/04/14 2:15 p.m.•40 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS0.02082EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/14 2:15 p.m.•28 views

Null pointer dereference

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

7.5CVSS9.7AI score0.02082EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2021/04/14 2:15 p.m.•38 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS7.5AI score0.02082EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/04/14 2:15 p.m.•10 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS8.9AI score0.02082EPSS
SaveExploits1References2
Mend
Mend
•added 2021/04/14 1:51 p.m.•3 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS0.02082EPSS
SaveExploits1References3
CVE
CVE
•added 2021/04/14 1:51 p.m.•76 views

CVE-2021-28300

GPAC v0.5.2 contains a NULL Pointer Dereference in isomedia/track.c MergeTrack() that can be triggered by uploading a malicious MP4, allowing remote attackers to execute arbitrary code or cause a Denial-of-Service. This is reflected across multiple sources (CVE-2021-28300, Red Hat, Debian OSV, CN...

9.8CVSS9.6AI score0.02082EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/14 1:51 p.m.•39 views

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.9AI score0.02082EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2021/04/14 1:51 p.m.•73 views

CVE-2021-28300

Removed by vendor...

9.8CVSS8.2AI score0.02082EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•5 views

CVE-2021-28300: NULL Pointer Dereference

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS6.4AI score0.02082EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•3 views

PT-2021-17842

Name of the Vulnerable Software and Affected Versions: GPAC version 0.5.2 Description: A NULL pointer dereference issue exists in the isomedia/track.c module's MergeTrack function, allowing attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS0.02082EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•17 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS6.2AI score0.02082EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2021/04/10 2:38 p.m.•7 views

gpac:fuzz_parse: Stack-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5475902680072192 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffcaae88b00 Crash State: gfstrdu...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/04/01 4:56 a.m.•6 views

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6389891240951808 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9f9f84ddb0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/23 1:22 a.m.•6 views

gpac:fuzz_parse: Heap-use-after-free in gf_isom_box_del

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4511231290507264 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000a8 Crash State:...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/13 12:00 a.m.•9 views

GPAC 0.8.0 suffers from a denial of service vulnerability

GPAC is a framework for the development of multimedia for research and academia. A denial of service vulnerability exists in GPAC 0.8.0, which can be exploited by an attacker to cause a denial of service attack...

7AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:35 p.m.•15 views

gpac:fuzz_parse: Stack-use-after-return in on_aom_av1_eos

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4638007761174528 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-use-after-return WRITE 4 Crash Address: 0x7f7651e06838 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 2:25 p.m.•5 views

gpac:fuzz_parse: Heap-buffer-overflow in stsz_box_read

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5080378604912640 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6140000001f0 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:52 a.m.•11 views

gpac:fuzz_parse: Heap-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5479477149827072 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address: 0x602000000138 Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:43 a.m.•6 views

gpac:fuzz_parse: Segv on unknown address in gf_list_count

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5026573989314560 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gflistcount...

5.8AI score
SaveExploits0
Veracode
Veracode
•added 2020/12/15 10:27 a.m.•24 views

Denial Of Service (DoS)

GPAC is vulnerable to denial of service DoS. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

5.5CVSS2.7AI score0.0123EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder