CVE-2021-45760

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-40572

GPAC CVE-2021-40572 affects the MP4Box component in GPAC 1.0.1, with a double-free bug in av1dmx_finalize (reframe_av1.c) that can cause denial of service. Public details describe the vulnerability and some patch guidance: Debian reports fixes in GPAC 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA recommends...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the mpgviddmxprocess function in the product's reframempgvid.c file. An attacker could cause a denial of service through this vulnerability...

CVE-2021-45760

GPAC v1.1.0 contains an invalid memory address dereference via gf_list_last(), leading to a Denial of Service (CVE-2021-45760). The connected advisories (e.g., Debian DSA-5411, Gentoo GLSA 2024) reference this CVE among multiple GPAC vulnerabilities and recommend upgrading to newer GPAC releases ...

CVE-2021-40568

GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...

CVE-2021-40574

GPAC GPAC is affected: the MP4Box binary (GPAC) from 0.9.0-preview to 1.0.1 contains a double-free in gf_text_get_utf8_line (load_text.c), enabling denial of service and potentially code execution/privilege escalation. Debian advisory DSA-5411-1 fixes this in bullseye with gpac version 1.0.1+dfsg...

CVE-2021-40573: Double Free

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability, which can be exploited by attackers to cause denial of service and even code execution and elevation of privilege...

CVE-2021-40572

The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...

CVE-2021-40572

The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...

CVE-2021-40575

GPAC 1.0.1’s MP4Box mpgviddmx_process null pointer dereference leads to DoS. CVE-2021-40575 is associated with this issue; Debian notes a fix in gpac 1.0.1+dfsg1-4+deb11u2 (Bullseye). If using affected GPAC packages, upgrade to the patched version to mitigate. The Initial description confirms the...

CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40567

GPAC (up to version 1.0.1) contains a segmentation fault in gf_odf_size_descriptor (desc_private.c) when using mp4box, leading to denial of service. Affected CVE: CVE-2021-40567. Debian advisory DSA-5411-1 fixes with gpac 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA 202408-21 advises upgrading to the lates...

CVE-2021-40567: Undefined Security Weakness

Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of service...

CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40569: Double Free

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2021-40567

Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of service...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from multiple memory releases by the gftextgetutf8line function in the product loadtext.c file. An attacker could cause a denial of service or even code execution and privilege escalation through...