UBUNTU-CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

Design/Logic Flaw

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298: Integer Overflow or Wraparound

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298

Removed by vendor...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

PT-2023-6217

Name of the Vulnerable Software and Affected Versions GPAC versions 2.2.1 and earlier Description The issue is related to an integer overflow in the Q DecCoordOnUnitSphere function, located in the src/bifs/unquantize.c file of the GPAC multimedia platform. This can be exploited by a local attacke...

CVE-2023-42298

CVE-2023-42298 affects GPAC v2.2.1 and earlier, where the vulnerability lies in the Q_DecCoordOnUnitSphere function (src/bifs/unquantize.c). This local denial-of-service could be triggered by a local attacker. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW PR, NONE/NON-INTACT CONF/...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the QDecCoordOnUnitSphere function of file src/bifs/unquantize.c...

heap-use-after-free in MP4Box

Description heap-use-after-free in MP4Box Version $ ./MP4Box -version MP4Box - GPAC version 2.3-DEV-rev566-g50c2ab06f-master Platform $ uname -a Linux user-GE40-2PC-Dragon-Eyes 6.2.0-33-generic 3322.04.1-Ubuntu SMP PREEMPTDYNAMIC Thu Sep 7 10:33:52 UTC 2 x8664 x8664 x8664 GNU/Linux Asan 33mTTML...

3 SEGV in MP4Box

Description 3 SEGV in MP4Box Version $ ./MP4Box -version MP4Box - GPAC version 2.3-DEV-rev566-g50c2ab06f-master Platform $ uname -a Linux user-GE40-2PC-Dragon-Eyes 6.2.0-33-generic 3322.04.1-Ubuntu SMP PREEMPTDYNAMIC Thu Sep 7 10:33:52 UTC 2 x8664 x8664 x8664 GNU/Linux Reproduce ./MP4Box -dash...

CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

DEBIAN-CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

UBUNTU-CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-5520 Out-of-bounds Read in gpac/gpac

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

CVE-2023-5520

Removed by vendor...

CVE-2023-5520

CVE-2023-5520 is a concrete vulnerability: an out-of-bounds read in gpac/gpac prior to 2.2.2 (GPAC MP4Box). The NVD CVSS v3.1 vector indicates LOCAL access, no user interaction, with high impact to confidentiality (C:H) and availability (A:H); integrity impact is none. Affected component is the G...