7584 matches found
UBUNTU-CVE-2022-30976
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-30976
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-30976
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-30976
CVE-2022-30976 concerns GPAC 2.0.0, where the Unicode utf8_wcslen (gf_utf8_wcslen) usage in utils/utf.c can cause a heap-based buffer over-read, as demonstrated by MP4Box. The concrete affected component is GPAC’s core handling of Unicode strings in utils/utf.c, leading to information disclosure ...
CVE-2022-30976
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-30976
Removed by vendor...
CVE-2022-1795 Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...
CVE-2022-1795
CVE-2022-1795 affects GPAC (gpac/gpac) prior to version 2.1.0-DEV. Multiple connected advisories describe a memory misreference/Use After Free vulnerability in GPAC, potentially causing a crash and, in some disclosures, arbitrary code execution. Sources consistently identify the issue as originat...
CVE-2022-1795: Use After Free
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...
PT-2022-20433
Name of the Vulnerable Software and Affected Versions GPAC version 2.0.0 Description The issue is related to the misuse of a certain Unicode function, specifically utf8 wcslen renamed gf utf8 wcslen, in the utils/utf.c file. This results in a heap-based buffer over-read, which can be demonstrated...
GPAC 缓冲区错误漏洞
GPAC is an open source multimedia framework. GPAC 2.0.0 suffers from a buffer overflow vulnerability that stems from abuse of the Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c. An attacker could exploit this vulnerability to cause a heap-based buffer over read...
CVE-2022-1795
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...
CVE-2022-30976: Out-of-bounds Read
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-1795 Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV...
CVE-2022-1795
Removed by vendor...
Use After Free
Description Use After Free in gpac Proof of Concept MP4Box -bt POC1 POC1 is here ASAN ==74043==ERROR: AddressSanitizer: heap-use-after-free on address 0x604000003fd0 at pc 0x7f0c5374e845 bp 0x7ffcfc56f2b0 sp 0x7ffcfc56f2a8 READ of size 8 at 0x604000003fd0 thread T0 0 0x7f0c5374e844 in...
CVE-2022-29340
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gfisomparsemovieboxesinternal due to improper return value handling of GFSKIPBOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad...
CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...
CVE-2022-29340
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gfisomparsemovieboxesinternal due to improper return value handling of GFSKIPBOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad...
CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...