CVE-2019-20629

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20163

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfodfavccfgwritebs in odf/descriptors.c...

CVE-2019-20162

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

CVE-2019-13618

In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c...

CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2018-21017

GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...

CVE-2018-21016

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...

CVE-2018-21015

AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...

PT-2025-34079

Уязвимость функции mp4 mux cenc insert pssh утилиты MP4Box мультимедийной платформы GPAC связана с неконтролируемым расходом ресурсов. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-34088

Уязвимость функции gf cenc set pssh утилиты MP4Box мультимедийной платформы GPAC связана с копированием буфера без проверки размера входных данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in m2tsdmx_declare_pid

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6245604131143680 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x507000031118 Crash State:...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfvvcreadspsbsinternal function in the MP4Box module of the GPAC multimedia platform is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

gf_filterpacket_del Heap Buffer Overflow DoS

The vulnerability of the gffilterpacketdel function on the GPAC multimedia platform is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

GPAC NULL Pointer DoS

The vulnerability of the multimedia platform GPAC is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box gf_hevc_read_sps_bs_internal Code Execution

The vulnerability of the gfhevcreadspsbsinternal function in the MP4Box module of the GPAC multimedia platform is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

GPAC Uncontrolled Resource Consumption DoS

The vulnerability of the multimedia platform GPAC is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

GPAC gf_m2ts_process_pmt DoS

The vulnerability in the gfm2tsprocesspmt function of the multimedia platform GPAC involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_props_insert_property

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6441917791666176 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x50300000abec Crash State:...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfhevcreadspsbsinternal function in the avparsers.c file of the MP4Box package of the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure during...