GPAC mp4box资源管理错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master, which...

CVE-2022-27147

CVE-2022-27147 affects GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master with a use-after-free in function gf_node_get_attribute_by_tag. The NVD entry reports a MEDIUM base score (CVSSv3.1: 5.5) with LOCAL exploitability and user interaction required, and a LOW integrity/availability impact (HIGH f...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27148: Integer Overflow or Wraparound

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27145

Removed by vendor...

CVE-2022-27147

Removed by vendor...

MP4Box Filter Heap Buffer Overflow DoS

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Media Rewrite Buffer Overflow DoS

The vulnerability of the MediaRewriteODFrame function in the MP4Box module of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

gf_odf_del_ipmp_tool Heap Buffer Overflow DoS

The vulnerability of the gfodfdelipmptool function in the odfcode.c component of the multimedia platform GPAC involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service failures...

GPAC Decoder Confidential Data Compromise

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

MP4Box URL GetProtocolType DoS

The vulnerability of the URLGetProtocolType function in the MP4Box multimedia platform of GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created file...

GPAC MPEG-4 Decoder Data Compromise

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the abstboxsize function in the MP4Box command of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

GPAC Decoder Heap Buffer Overflow DoS

The vulnerability of the STTS decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the ilstitemboxdump function in the boxdump.c component of the GPAC multimedia platform is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service interruptions...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

HDLR decoder in the Data Compromise

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC decoding function is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and cau...

MP4Box stbl_AppendSize Heap Buffer Overflow DoS

The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfodfdesccopy function in the MP4Box tool of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Heap Buffer Overflow Info Disclosure

The vulnerability of the afraboxread function in the MP4Box component of the GPAC multimedia platform involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially created file...