PT-2019-5482

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a buffer overflow in the cat multiple files function of the GPAC multimedia platform. This can be exploited to impact the confidentiality, integrity, and availability of...

PT-2022-19553

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a Null Pointer Dereference vulnerability in the gf isom parse movie boxes internal function due to improper return value handling of GF SKIP BOX, causing a Denial o...

PT-2020-10607

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. It contains an invalid pointer dereference in the gf list count function in utils/list.c. Recommendations...

PT-2022-19552

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a failed assertion in the BS ReadByte function located in utils/bitstream.c, which causes a Denial of Service. Recommendations For GPAC version...

PT-2019-5484

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to a mishandled return value. This can potentially impact the...

PT-2020-6634 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function ilst item box dump located in box dump.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. This issue can be exploited by a remo...

PT-2021-10987 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...

PT-2021-10988 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function nhmldump send header located in write nhml.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For gpac versions...

PT-2021-10989 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...

PT-2021-6596 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function vwid box del located in box code base.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. This issue can be exploited by a remot...

PT-2023-15162 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow that occurs via the gf vvc read sps bs internal function in the media tools/av parsers.c file. This function is part of the GPAC MP4box, whic...

PT-2023-15165 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to an Integer overflow vulnerability in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8316. Recommendations: For GPAC MP4box versi...

PT-2023-15166 · Unknown +2 · Gpac Mp4Box +2

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a heap use-after-free vulnerability. It occurs via the file filters/dmx m2ts.c at line 470 in the m2tsdmx declare pid function. This vulnerability can be...

PT-2023-1542 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev505-gb9577e6ad-master Description: The issue is related to a memory leak via the afrt box read function at box code adobe.c. This can be exploited by a remote attacker to cause a denial of service. The memory leak is d...

PT-2023-15450 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the eac3 update channels function, located in the media tools/av parsers.c file at line 9113. This function is part of the GPAC MP4box...

PT-2023-15451 · Unknown +2 · Gpac Mp4Box +2

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8261. This function is susceptible to a buffer overflow, whi...

PT-2023-15452 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev617-g85ce76efd Description: The issue is related to a Buffer Overflow in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8273. Recommendations: For GPAC MP4box version...

PT-2023-16508 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to V2.1.0-DEV. Description: The issue is a Heap-based Buffer Overflow. It affects the GitHub repository gpac/gpac. Recommendations: For versions prior to V2.1.0-DEV, update to V2.1.0-DEV or later to resolve the issue...

PT-2023-16546 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: A buffer over-read issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where th...

PT-2023-17149 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incident...