GPAC has an unspecified vulnerability (CNVD-2022-08186)

GPAC is an open source multimedia framework. a security vulnerability exists prior to GPAC 1.0.1, which stems from a segmentation error in the naludmxenqueueordispatch function in reframenalu.c caused by a floating-point exception. No detailed vulnerability details are available at this time...

PT-2022-12614

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description The issue is related to a stack overflow via the function gf node get name at scenegraph/base scenegraph.c. This can lead to a program crash, causing a Denial of Service DoS. Recommendations For GPAC version 1.1....

CVE-2021-46237: NULL Pointer Dereference

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...

PT-2022-12634

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A segmentation fault was discovered in the binary MP4Box via the function memmove avx unaligned erms, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.0.1, as a temporary workaround,...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...

CVE-2021-46311: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12633

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg destroy routes at scenegraph/vrml route.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...

CVE-2021-46313: Undefined Security Weakness

The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46234: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46238: Out-of-bounds Write

GPAC v1.1.0 was discovered to contain a stack overflow via the function gfnodegetname at scenegraph/basescenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service DoS...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service DoS attacks...

CVE-2021-46240: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfdumpvrmlsffield at scenemanager/scenedump.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46236: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgvrmlfieldpointerdel at scenegraph/vrmltools.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12611

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

CVE-2021-46239: Use After Free

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12613

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description An untrusted pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

GPAC 安全漏洞

GPAC is an open source multimedia framework. a security vulnerability exists in GPAC, which stems from a binary MP4Box in GPAC v1.0.1 that was found to contain a segmentation error via the function memmove avx unaligned erms. An attacker could exploit this vulnerability to cause a denial of servi...

None in gpac/gpac

Description Use After Free in gpac Proof of Concept MP4Box -bt POC4 MP4Box -bt POC5 POC4 is here. POC5 is here. ASAN ==414586==ERROR: AddressSanitizer: heap-use-after-free on address 0x6100000007fc at pc 0x7f7926081250 bp 0x7ffd2e84f4a0 sp 0x7ffd2e84f490 READ of size 4 at 0x6100000007fc thread T0...