7593 matches found
CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
CVE-2022-45343
GPAC CVE-2022-45343 is a heap use-after-free in Q_IsTypeOn (unquantize.c) of GPAC v2.1-DEV-rev478-g696e6f868-master. Impact listed in sources includes potential denial of service and arbitrary code execution. Public details confirm the vulnerable component and root cause; remediation information ...
CVE-2022-4202
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2022-45202
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimCboxread at isomedia/boxcode3gpp.c...
CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
PT-2022-26208 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev490-g68064e101-master Description: A problematic vulnerability was found in GPAC, affecting the function lsr translate coords of the file laser/lsr dec.c. The manipulation leads to integer overflow. It is possible to...
GPAC buffer error vulnerability
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version v2.1-DEV-rev428-gcb8ae46c8-master, which stems from a discovery of a stack overflow vulnerability contained in the dimCboxread function in isomedia/boxcode3gpp.c. The vulnerability is caused by an error i...
CVE-2022-45202
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimCboxread at isomedia/boxcode3gpp.c...
CVE-2022-45202
GPAC vulnerability CVE-2022-45202: GPAC v2.1-DEV-rev428-gcb8ae46c8-master contains a stack overflow in dimC_box_read (isomedia/box_code_3gpp.c). Public sources validate this issue and note potential impact; details about exploit, affected configurations, or in-wild exploit status are not provided...
CVE-2022-4202
CVE-2022-4202 affects GPAC 2.1-DEV-rev490-g68064e101-master, specifically the function lsr_translate_coords in laser/lsr_dec.c. The issue is an integer overflow in that routine, with remote attack potential. Publicly disclosed exploit information exists. A patch is identified as b3d821c4ae9ba62b3...
CVE-2022-45202
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimCboxread at isomedia/boxcode3gpp.c...
CVE-2022-4202 GPAC lsr_dec.c lsr_translate_coords integer overflow
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2022-45204
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimCboxread at isomedia/boxcode3gpp.c...
CVE-2022-4202 GPAC lsr_dec.c lsr_translate_coords integer overflow
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
SVG Parser SVG Parse Buffer Overflow DoS
The vulnerability of the svgparsepreserveaspectratio function in the SVG Parser component of the GPAC multimedia platform is related to improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
WS-2022-0449
A heap-buffer-overflow was discovered in gfisomboxwriteheader in gpac/gpac prior to 2.2.0...
ROS-20221118-02
A vulnerability in the MPEG-4 GPAC system standard implementation is related to the svgparsepreserveaspectratio in the scenegraph/svgattributes.c file of the SVG Parser component. Exploitation of the vulnerability could allow an attacker acting remotely to cause a memory leak. an attacker acting...
Stack-Based Buffer Overflow in gf_sg_proto_field_is_sftime_offset
Description Stack-Based Buffer Overflow in gfsgprotofieldissftimeoffset at vrmlproto.c:1295. version git log commit 05eaac875354682942b70c790bcd62cb5f4cc825 grafted, HEAD - master, origin/master, origin/HEAD Author: Jean Le Feuvre Date: Mon Nov 14 18:07:45 2022 +0100 fixed msvc warnings ./MP4Box...
CVE-2022-3957
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svgparsepreserveaspectratio of the file scenegraph/svgattributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the...
DEBIAN-CVE-2022-3957
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svgparsepreserveaspectratio of the file scenegraph/svgattributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the...