The vulnerability of the gf_node_get_tag function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the gfnodegettag function in the MP4Box utility of the GPAC multimedia platform is related to its use after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2021-30015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a Null Pointer Dereference in function filtercore/filterpck.c:gffilterpcknewallocinternal in GPAC 1.0.1. The pid comes from function...

Linux Distros Unpatched Vulnerability : CVE-2022-1222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV. CVE-2022-1222 Note that Nessus relies on the presence of the package as reported by the vendor...

Linux Distros Unpatched Vulnerability : CVE-2019-20159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c. CVE-2019-20159 Note...

Linux Distros Unpatched Vulnerability : CVE-2021-45292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2021-21861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When...

Linux Distros Unpatched Vulnerability : CVE-2021-45263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid free vulnerability exists in gpac 1.1.0 via the gfsvgdeleteattributevalue function, which causes a segmentation fault and application crash...

Linux Distros Unpatched Vulnerability : CVE-2021-21840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A speciall...

Linux Distros Unpatched Vulnerability : CVE-2022-3178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. CVE-2022-3178 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-47095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevcparsevpsextension function of mediatools/avparsers.c CVE-2022-47095 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2021-33364

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory leak in the defparentboxnew function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. CVE-2021-33364 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2021-30020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be...

The vulnerability of the gf_filter_pid_inst_swap_delete_task function in the MP4Box multimedia platform GPAC allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the gffilterpidinstswapdeletetask function in the MP4Box multimedia platform GPAC utility is related to its use after release. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gf_filter_packetDestroy function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gffilterpacketDestroy function in the MP4Box utility of the GPAC multimedia platform is related to its use after release. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gf_ac4_pres_b_4_back_channels_present function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfac4presb4backchannelspresent function in the MP4Box utility of the GPAC multimedia platform is related to the swapping of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2023-0770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2. CVE-2023-0770 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2021-30019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting ...

Linux Distros Unpatched Vulnerability : CVE-2021-36412

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have...

PT-2026-45417

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A segmentation violation occurs in the gf isom apple set tag ex function located in /isomedia/isom write.c due to pointer dereferencing. This allows an attacker to cause a Denial of...

gpac:fuzz_probe_analyze: Heap-use-after-free in gf_odf_ac4_cfg_clean_list

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6195195197849600 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x508000000070...