CVE-2023-46929: Improper Input Validation

An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gfavcchangevui /afltest/gpac/src/mediatools/avparsers.c:6872:55 allows attackers to crash the application...

CVE-2023-46929

An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gfavcchangevui /afltest/gpac/src/mediatools/avparsers.c:6872:55 allows attackers to crash the application...

CVE-2023-46929

GPAC 2.3-DEV-rev605-gfc9e29089-master’s MP4Box gf_avc_change_vui function (av_parsers.c:6872:55) allows remote attackers to crash the application. The CVE-2023-46929 entry is supported by multiple sources (NVD, OSV, Red Hat, CNNVD etc.). Affected component is GPAC’s MP4Box parser; root cause is a...

CVE-2023-46929

Removed by vendor...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in ctxload_probe_data

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6418273784627200 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x62400007df85...

gpac:fuzz_probe_analyze: Index-out-of-bounds in oggpack_read

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5187757047611392 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: oggpackre...

gpac:fuzz_probe_analyze: Index-out-of-bounds in hevc_parse_short_term_ref_pic_set

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5673701324423168 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gpac:fuzz_parse: Segv on unknown address in gf_free

Detailed Report: https://oss-fuzz.com/testcase?key=6103196912975872 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gffree unknboxdel gfisomboxdel Sanitizer: address ASAN Crash...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_token_get_line

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5243570415861760 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7ffc60047d18 Crash Stat...

gpac:fuzz_probe_analyze: Index-out-of-bounds in vvc_get_ctb_info_in_slice

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5389270067838976 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gpac:fuzz_probe_analyze: Stack-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6154989789380608 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7941193b0020 Crash State:...

gpac:fuzz_probe_analyze: Index-out-of-bounds in gf_avc_read_pps_bs_internal

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5712607923011584 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in BS_ReadByte

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4808448084606976 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60600000401c Crash State:...

gpac:fuzz_probe_analyze: Index-out-of-bounds in gf_avc_read_pps_bs_internal

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4687583460065280 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_url_to_fs_path

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6586258444648448 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000ed9...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in BS_ReadByte

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5262908959096832 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60a0000001d7 Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_xml_sax_parse_intern

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4720135033978880 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzprobeanalyze Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x622000011c89...

Heap Buffer Overflow

GPAC is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper bound checking via the str2ulong class in src/mediatools/avilib.c, resulting in Heap Buffer Overflow...

CVE-2023-46932

Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service DoS via str2ulong class in src/mediatools/avilib.c in gpac/MP4Box...

CVE-2023-46932

Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service DoS via str2ulong class in src/mediatools/avilib.c in gpac/MP4Box...