CVE-2024-24265

CVE-2024-24265 affects gpac v2.2.1, with a memory leak in the gf_filter_pid_merge_properties_internal function caused by the dst_props variable. Several connected sources confirm the issue and its association with gpac 2.2.1, including Red Hat and OSV entries. No public exploit details are provid...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265: Missing Release of Memory after Effective Lifetime

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24265

gpac v2.2.1 was discovered to contain a memory leak via the dstprops variable in the gffilterpidmergepropertiesinternal function...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.2.1, which was discovered via the dasherconfigurepid function in /src/filters/dasher.c to contain a post-release reuse vulnerability...

CVE-2024-24266: Use After Free

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24267

CVE-2024-24267 affects gpac v2.2.1 , with a memory leak in the gfio_blob variable inside the function gf_fileio_from_blob . Root cause: memory not released, leading to potential resource exhaustion. The issue is mitigated by upgrading to gpac v2.4.0 (fixed). Exploitation details are not provided ...

PT-2024-6390 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.2.1 Description: The issue is related to a memory leak in the gf filter pid merge properties internal function, specifically via the dst props variable. This can be exploited by a remote attacker to cause a denial of service. T...

CVE-2024-24267: Missing Release of Memory after Effective Lifetime

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in txtin_probe_data

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5131922854445056 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62400005df85...

gpac:fuzz_probe_analyze: Crash in img_process

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6385597702799360 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7bb84a837844 Crash State: imgprocess...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in RTSP_UnpackURL

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5854571771527168 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc2e6a048...

gpac:fuzz_probe_analyze: Index-out-of-bounds in gf_sdp_info_parse

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4772332388286464 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...