PT-2019-16113

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A use-after-free issue was found in the function gf isom box dump ex in isomedia/box funcs.c. Recommendations For GPAC version 0.8.0, update to a version that fixes this issue...

PT-2019-16116 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: An issue was discovered in the function GF IPMPX AUTH Delete in odf/ipmpx code.c, which contains an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, upda...

PT-2019-16110 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A NULL pointer dereference issue was found in the function ilst item Read in the file isomedia/box code apple.c. This issue can cause problems when the function is called...

CVE-2019-20171: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

PT-2019-16108 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: An issue was discovered in the function gf odf avc cfg write bs in odf/descriptors.c, which leads to a NULL pointer dereference. Recommendations: For GPAC version 0.8.0, ther...

PT-2019-16117

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in GPAC, which results in memory leaks. The memory leaks occur in the metx New function in isomedia/box code base.c and the abst Read function in...

CVE-2019-20162: Out-of-bounds Write

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

CVE-2019-20166: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomdump in isomedia/boxdump.c...

CVE-2019-20169: Use After Free

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

CVE-2019-20170: Release of Invalid Pointer or Reference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GFIPMPXAUTHDelete in odf/ipmpxcode.c...

CVE-2019-20159: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...

CVE-2019-20161: Out-of-bounds Write

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...

CVE-2019-20163: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfodfavccfgwritebs in odf/descriptors.c...

CVE-2019-20164: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...

CVE-2019-20167: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...

CVE-2019-20168: Use After Free

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

CVE-2019-20160: Out-of-bounds Write

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...

CVE-2019-20165: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...

PT-2019-16111

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom dump in isomedia/box dump.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, update to a...

PT-2019-16107 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue exists in the function gf isom box parse ex located in isomedia/box funcs.c. Recommendations: For GPAC version 0.8.0, update to a version...