Lucene search
+L

7528 matches found

OSS-Fuzz
OSS-Fuzz
•added 2025/08/13 4:41 a.m.•9 views

gpac:fuzz_probe_analyze: Heap-use-after-free in gf_odf_ac4_cfg_clean_list

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6195195197849600 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x508000000070...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/11 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-7797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file...

6.9CVSS4.8AI score0.01009EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/08/07 12:00 a.m.•2 views

PT-2025-42858

Уязвимость функции StatSFVec2f утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.9CVSS5.8AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/08/04 12:00 a.m.•30 views

The vulnerability of the m2tsdmx_send_packet() function in the MP4Box multimedia platform GPAC allows a hacker to execute arbitrary code.

The vulnerability of the m2tsdmxsendpacket function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflows during the processing of TS files. Exploiting this vulnerability allows an attacker to execute arbitrary code upon opening a specially crafted file...

7.8CVSS6.3AI score
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•7 views

PT-2025-42854

Уязвимость функции dump isom saps утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.9CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•2 views

PT-2025-42855

Уязвимость функции dasher process утилиты MP4Box мультимедийной платформы GPAC связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

7.2CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•2 views

PT-2025-42857

Уязвимость функции gf isom get esd утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.9CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/01 12:00 a.m.•3 views

PT-2025-42856

Уязвимость функции gf filter pid send event downstream утилиты MP4Box мультимедийной платформы GPAC связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании или выполнить произвольный код...

10CVSS5.8AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/28 12:00 a.m.•37 views

PT-2026-45418

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A heap use-after-free occurs in the dasher process function located in /filters/dasher.c. This issue allows attackers to cause a Denial of Service DoS by providing a specially crafted...

5.5CVSS6.4AI score0.0013EPSS
SaveExploits0References20
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•33 views

PT-2026-45414

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A heap buffer overflow occurs in the m2tsdmx send packet function within the filters/dmx m2ts.c component. This issue allows an attacker to cause a Denial of Service DoS by providing a specially crafted MP4...

5.5CVSS6.4AI score0.00158EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
•added 2025/07/20 6:01 p.m.•20 views

CVE-2025-7797

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS5.2AI score0.01009EPSS
SaveExploits1References1
OSV
OSV
•added 2025/07/18 6:15 p.m.•125 views

DEBIAN-CVE-2025-7797

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS4.5AI score0.01009EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/18 6:15 p.m.•38 views

CVE-2025-7797

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS0.01009EPSS
SaveExploits1References5
OSV
OSV
•added 2025/07/18 6:15 p.m.•16 views

UBUNTU-CVE-2025-7797

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS4.7AI score0.01009EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/07/18 5:44 p.m.•45 views

CVE-2025-7797 GPAC dash_client.c gf_dash_download_init_segment null pointer dereference

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS0.01009EPSS
SaveExploits1References5
Mend
Mend
•added 2025/07/18 5:44 p.m.•7 views

CVE-2025-7797

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS0.01009EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2025/07/18 5:44 p.m.•6 views

CVE-2025-7797 GPAC dash_client.c gf_dash_download_init_segment null pointer dereference

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS5.3AI score0.01009EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/18 5:44 p.m.•63 views

CVE-2025-7797

GPAC up to 2.4 contains a vulnerable function gf_dash_download_init_segment in src/media_tools/dash_client.c where manipulation of base_init_url can cause a null pointer dereference. The vulnerability can be triggered remotely and the exploit has been disclosed publicly. A patch is available (153...

6.9CVSS5.4AI score0.01009EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2025/07/18 5:44 p.m.•76 views

CVE-2025-7797

Removed by vendor...

6.9CVSS6AI score0.01009EPSS
SaveExploits1
OSV
OSV
•added 2025/07/18 5:44 p.m.•12 views

CVE-2025-7797 GPAC dash_client.c gf_dash_download_init_segment null pointer dereference

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...

6.9CVSS4.8AI score
SaveExploits0References7
Rows per page
Query Builder