GPAC dasher_configure_pid DoS

The vulnerability of the dasherconfigurepid function on the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the gffilterpidmergepropertiesinternal function on the GPAC multimedia platform is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

gf_fileio_from_blob() DoS

The vulnerability of the gffileiofromblob function on the GPAC multimedia platform is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

gpac:fuzz_probe_analyze: Heap-use-after-free in gsfdmx_finalize

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5906524839411712 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x511000400ff8 Crash State:...

gpac:fuzz_m2ts_probe: Heap-buffer-overflow in BS_ReadByte

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5093172722597888 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzm2tsprobe Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50700005dbb1 Cra...

ROS-20240923-03

A vulnerability in the gffilterpidpidmergepropertiesinternal function of the GPAC multimedia platform, related to a The lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow An attacker acting remotely to cause a denial of service Vulnerability in the...

gpac:fuzz_m2ts_probe: Crash in gf_m2ts_section_complete

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4796518123503616 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzm2tsprobe Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x5bab86eda336 Crash State:...

gpac:fuzz_probe_analyze: Crash in gf_m3u8_to_mpd

Detailed Report: https://oss-fuzz.com/testcase?key=5150445264240640 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x50510001b6af Crash State: gfm3u8tompd gfdashopen dashdmxconfigurepid Sanitizer:...

ROS-20240902-06

Vulnerability of swfgetstring function of GPAC multimedia platform, is related to the operation exceeding the boundaries of the buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information Vulnerability in the gfdashsetupperio...

gpac:fuzz_parse: Heap-use-after-free in gf_isom_box_del

Detailed Report: https://oss-fuzz.com/testcase?key=5951157598486528 Project: gpac Fuzzing Engine: centipede Fuzz Target: fuzzparse Job Type: centipedeasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b0000002a8 Crash State: gfisomboxdel gfisomboxdel gfisomboxde...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_hevc_parse_nalu_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6203059915522048 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0x7eb7a122186...

gf_avc_change_vui() DoS

The vulnerability of the gfavcchangevui function on the GPAC multimedia platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GPAC Memory Buffer Overflow

The vulnerability in the filter/loadtext.c function of the GPAC multimedia platform relates to the copying of buffers without checking the input size. Exploiting this vulnerability could allow an attacker to overflow memory buffers...

GPAC Heap Buffer Overflow DoS

The vulnerability of the GPAC multimedia platform is related to reading data outside the buffer exchange in the GitHub repository gpac/gpac. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GPAC Heap Buffer Overflow DoS

The vulnerability of the multimedia platform GPAC is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service failures...

gf_isom_add_chapter() DoS

The vulnerability of the gfisomaddchapter function on the GPAC multimedia platform is related to a memory leak in the gfisomaddchapter function located in /isomedia/isomwrite.c. Exploiting this vulnerability could allow an attacker to cause a service failure using the created MP4 file...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the gfm2tsprocesssdt function on the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

GPAC av1_uvlc Heap Buffer Overflow DoS

The vulnerability of the av1uvlc function on the GPAC multimedia platform is related to an infinite loop in the av1uvlc function found in mediatools/avparsers.c. Exploiting this vulnerability could allow a attacker to cause a service failure...

ISOM_IOD Component DoS

The vulnerability of the ISOMIOD component in the GPAC multimedia platform is related to writing beyond the boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

GLSA-202408-21 : GPAC: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-21 GPAC: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GPAC. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...