CVE-2021-40575

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmxprocess function in reframempgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that stems from the function gflistlast containing an invalid memory address dereference. An attacker could exploit this vulnerability to cause a denial of service...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC, which stems from the gflistdel function in the product list.c file releasing memory multiple times. An attacker could cause a denial of service via this vulnerability...

CVE-2021-40569

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2021-40576: NULL Pointer Dereference

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

CVE-2021-40570: Double Free

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-45760

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-45760: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

CVE-2021-40572

GPAC CVE-2021-40572 affects the MP4Box component in GPAC 1.0.1, with a double-free bug in av1dmx_finalize (reframe_av1.c) that can cause denial of service. Public details describe the vulnerability and some patch guidance: Debian reports fixes in GPAC 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA recommends...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the mpgviddmxprocess function in the product's reframempgvid.c file. An attacker could cause a denial of service through this vulnerability...

CVE-2021-45760

GPAC v1.1.0 contains an invalid memory address dereference via gf_list_last(), leading to a Denial of Service (CVE-2021-45760). The connected advisories (e.g., Debian DSA-5411, Gentoo GLSA 2024) reference this CVE among multiple GPAC vulnerabilities and recommend upgrading to newer GPAC releases ...

CVE-2021-40567

GPAC (up to version 1.0.1) contains a segmentation fault in gf_odf_size_descriptor (desc_private.c) when using mp4box, leading to denial of service. Affected CVE: CVE-2021-40567. Debian advisory DSA-5411-1 fixes with gpac 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA 202408-21 advises upgrading to the lates...

CVE-2021-40574

GPAC GPAC is affected: the MP4Box binary (GPAC) from 0.9.0-preview to 1.0.1 contains a double-free in gf_text_get_utf8_line (load_text.c), enabling denial of service and potentially code execution/privilege escalation. Debian advisory DSA-5411-1 fixes this in bullseye with gpac version 1.0.1+dfsg...

CVE-2021-40573: Double Free

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service...

CVE-2021-40568

GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability, which can be exploited by attackers to cause denial of service and even code execution and elevation of privilege...