CVE-2023-1655

CVE-2023-1655 concerns the GPAC project (gpac/gpac) with a heap-based buffer overflow in versions before 2.4.0. The root cause is a memory handling weakness that can lead to memory corruption and crashes, with a high impact on confidentiality, integrity, and availability as per the CVSS data. Aff...

CVE-2023-1655

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1654

CVE-2023-1654 affects the GPAC multimedia framework (gpac/gpac) prior to 2.4.0, where a Denial of Service is possible. The connected sources consistently identify DoS impact in gpac before 2.4.0. No explicit root-cause details are provided in the documents beyond the general DoS claim. Public rem...

CVE-2023-1655

Removed by vendor...

CVE-2023-1654

Removed by vendor...

CVE-2023-1654: Uncontrolled Resource Consumption

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1655: Heap-based Buffer Overflow

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1655 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1655 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1654 Denial of Service in gpac/gpac

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1654

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1654 Denial of Service in gpac/gpac

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0...

CVE-2023-1655 Heap-based Buffer Overflow in gpac/gpac

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0...

Unhandled SWF Tags in MP4Box: Potential Vulnerability in GPAC

An unhandled series of SWF tags have been identified in the MP4Box software, which is part of the GPAC multimedia framework. These tags are not properly processed, leading to potential vulnerabilities such as denial of service, buffer overflows, or other malicious attacks. POC: ./MP4Box -dash 100...

Heap Use-After-Free in GPAC MP4Box's ogg_stream_clear Function When Processing OGG Files

A heap use-after-free vulnerability has been discovered in GPAC MP4Box's oggstreamclear function when processing OGG files. The vulnerability occurs due to improper handling of memory allocations and deallocations while processing OGG files. This leads to the use of previously freed memory, causi...

DEBIAN-CVE-2023-1449

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gfav1resetstate of the file mediatools/avparsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The explo...

CVE-2023-1448

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...

DEBIAN-CVE-2023-1452

A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/loadtext.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit...

CVE-2023-1448

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...

CVE-2023-1449

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gfav1resetstate of the file mediatools/avparsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The explo...