CVE-2020-22677: Out-of-bounds Write

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

PT-2021-10779

Name of the Vulnerable Software and Affected Versions gpac version 0.8.0 Description An issue was discovered in the dump data hex function in box dump.c, which has a heap-based buffer overflow. This can lead to a denial of service DOS via a crafted input. Recommendations For gpac version 0.8.0,...

PT-2021-10781

Name of the Vulnerable Software and Affected Versions gpac version 0.8.0 Description The issue is related to a memory leak in the sgpd parse entry function in MP4Box, which allows attackers to cause a denial of service DoS via a crafted input. Recommendations For gpac version 0.8.0, consider...

CVE-2020-22675: Out-of-bounds Write

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

gpac MP4Box安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...

CVE-2020-22678: Out-of-bounds Write

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

PT-2021-10776

Name of the Vulnerable Software and Affected Versions gpac version 0.8.0 Description A memory leak in the senc Parse function in MP4Box allows attackers to cause a denial of service DoS via a crafted input. Recommendations For gpac version 0.8.0, at the moment, there is no information about a new...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...

gpac MP4Box安全漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...

Gpac MP4Box 缓冲区错误漏洞

MP4Box is a multimedia packager available in GPAC. A stack buffer overflow vulnerability exists in the nhmldmxsendsample function in src/filters/dmxnhml.c:1004 in MP4Box version 1.0.1. An attacker can exploit this vulnerability to cause a denial of service via the szXmlTo parameter...

Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to handle ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box 1.1.0 suffers from a buffer overflow vulnerability that can be exploited by attackers to...

Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a buffer overflow vulnerability, which can be exploited by attackers to crash...

Denial Of Service(DoS)

ccextractor:sid is vulnerable to denial of service. An issue was discovered in GPAC is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due a NULL pointer dereference in the function vwidboxdel located in boxcodebase.c...

Denial Of Service (DoS)

ccextractor is vulnerable to denial of service. The vulnerability exists due a NULL pointer dereference in MediaRewriteODFrame function in GPAC...

MGASA-2021-0431 Updated gpac packages fix security vulnerability

A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...

Updated gpac packages fix security vulnerability

A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...

GPAC null pointer dereference vulnerability (CNVD-2021-82976)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. vwidboxdel function in boxcodebase.c in GPAC 20200801 and earlier versions is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

GPAC Stack Buffer Overflow Vulnerability (CNVD-2021-82977)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

GPAC null pointer dereference vulnerability (CNVD-2021-82975)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the ilstitemboxdump function in boxdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...