CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20761: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

CVE-2018-20763: Out-of-bounds Write

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20762: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20760: Out-of-bounds Write

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

UBUNTU-CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

UBUNTU-CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

UBUNTU-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

PT-2023-3416

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2 Description The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the xml sax parse function. This overflow can lead to a denial of service. Recommendations For...

PT-2019-5481

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for szLineConv. This can potentially...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

PT-2021-10990

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: A NULL pointer dereference issue exists in the function dump isom sdp located in filedump.c, allowing an attacker to cause Denial of Service. Recommendations: For versions prior to 1.0.1, update to...

PT-2022-13689

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.1.0-DEV Description A null pointer dereference caused a segmentation fault in the GitHub repository gpac/gpac. Recommendations For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the issue...

PT-2020-10605

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the gf m2ts process pmt function in media tools/mpegts.c, which can cause a denial of service when processing a crafted MP4 file. Recommendations For versio...

PT-2020-10606

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the BS ReadByte function, which is called from gf bs read bit in utils/bitstream.c. This can cause a denial of service when a crafted MP4 file is processed...

PT-2020-10608

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. The issue is related to an invalid pointer dereference in the gf odf delete descriptor function in odf/des...

PT-2020-10604

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A Use-After-Free issue can cause a denial of service via a crafted MP4 file. The issue is located in the gf m2ts process pmt function in media tools/mpegts.c, as demonstrated by MP4Box. Recommendations...

PT-2022-11276

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command. This is due to a problem in the schm box size function. Recommendations For GPAC version 1.0.1, consider avoiding...

PT-2020-6620

Name of the Vulnerable Software and Affected Versions gpac versions prior to 1.0.1 Description The issue is related to a buffer overflow vulnerability in the gf fprintf function in os file.c of the gpac multimedia platform. This vulnerability allows attackers to execute arbitrary code, potentiall...