GPAC Code Issue Vulnerability

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC version 2.5-DEV-rev228-g11067ea92-master, which stems from a mishandling of a related function that results in a null pointer dereference...

CVE-2024-6064: Use After Free

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.5-DEV-rev228-g11067ea92-master. An attacker exploited the vulnerability to cause an infinite loop in the application...

PT-2024-37358 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problem was found in the function xmt node end of the file src/scene manager/loader xmt.c of the component MP4Box. The issue leads to use after free. Local access is required to...

PT-2024-37357

Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problematic issue has been found, affecting the function m2tsdmx on event of the file src/filters/dmx m2ts.c of the component MP4Box. The manipulation leads to null pointer...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_odf_vvc_cfg_write_bs

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5967890988728320 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x506000001208 Crash State:...

gpac:fuzz_probe_analyze: Crash in gf_list_count

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4840009390686208 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000001010009 Crash State: gflistcount...

gpac:fuzz_probe_analyze: Crash in gsfdmx_read_prop

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5737598801739776 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x502100000def Crash State: gsfdmxreadpro...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in swf_def_bits_jpeg

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6201254983303168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000016d1 Crash State:...

gpac:fuzz_probe_analyze: Crash in gsfdmx_read_prop

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6571312408494080 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x602100000e4f Crash State: gsfdmxreadpro...

gpac:fuzz_route: Heap-use-after-free in gf_netcap_load_pck

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5073863747633152 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6120000006b8 Crash State:...

ROS-20240412-05

A vulnerability in the gfisomnewgenericsampledescription function of the GPAC multimedia platform is related to the buffer copying without checking the input size. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

GPAC Code Execution

The vulnerability in the src/mediatools/avilib.c file of the multimedia platform GPAC is related to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

NewSFDouble file GPAC DoS

The vulnerability of the NewSFDouble function in the Scenegraph/vrmltools.c file of the GPAC multimedia platform is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability may allow an attacker to cause a service failure...

gpac/src/filter_core/filter.c Heap Buffer Overflow DoS

The vulnerability of the gffilterpacketdel function in the gpac/src/filtercore/filter.c file of the multimedia platform GPAC is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

gf_mpd_resolve_url Heap Buffer Overflow DoS

The vulnerability of the gfmpdresolveurl function in the mediatools/mpd.c file of the multimedia platform GPAC is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20240408-04

Vulnerability of cttsboxread function of Golang programming language is related to resource release errors. resources. Exploitation of the vulnerability may allow an attacker to cause a denial of service A vulnerability in the file src/mediatools/avilib.c of the GPAC multimedia platform, is relat...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in inspect_dump_mpeg124

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5024230379945984 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000f9c...

ROS-20240405-11

Vulnerability of the flushrefsamples function of the GPAC multimedia platform is related to incorrect use of dynamic memory during program operation. use of dynamic memory during program operation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of...

gpac:fuzz_route: Heap-buffer-overflow in default_log_callback_color

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4630848151289856 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzroute Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x611000042641 Crash State:...