7521 matches found
CVE-2021-31261
CVE-2021-31261 affects GPAC 1.0.1; the gf_hinter_track_new path allows memory read via a crafted MP4Box input. The impact is information disclosure (read memory) with local access and, per sources, user interaction may be required. Mitigation: upgrade GPAC to a newer release (Gentoo GLSA 202408-2...
CVE-2021-31255
Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-31262
Removed by vendor...
CVE-2021-31258
Removed by vendor...
CVE-2021-31255
Removed by vendor...
CVE-2021-31260
CVE-2021-31260 affects GPAC 1.0.1: the MergeTrack function can be triggered by a crafted MP4Box file, causing a NULL pointer dereference and a denial of service. Exploitation details are not provided beyond this description in the sources, but multiple advisories reference a vulnerability in GPAC...
CVE-2021-31256
Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-31262
GPAC 1.0.1 has a NULL pointer dereference in AV1_DuplicateConfig that can be triggered by a crafted MP4Box file, leading to denial of service. This CVE (CVE-2021-31262) is reported across multiple sources (NVD entry and CNVD/OSV/Gentoo advisories) with the same root cause. Affected component: GPA...
CVE-2021-31259
Removed by vendor...
CVE-2021-31256
Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-31261
The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...
PT-2021-19226
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the MergeTrack function. Recommendations For...
PT-2021-19220
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the tenc box read function in MP4Box, allowing attackers to potentially cause a denial of service or execute arbitrary code via a crafted file. This issue is related to invalid I...
PT-2021-19221
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the abst box read function within MP4Box in GPAC, allowing attackers to potentially cause a denial of service or execute arbitrary code by using a crafted file. No information is...
PT-2021-19222
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A memory leak in the stbl GetSampleInfos function in MP4Box allows attackers to read memory via a crafted file. Recommendations For GPAC version 1.0.1, at the moment, there is no information about a newer version...
PT-2021-19224
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom set extraction slc...
CVE-2021-30199: NULL Pointer Dereference
In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...
PT-2021-19227
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to read memory via a crafted file in the MP4Box command, specifically through the gf hinter track new function. Recommendations For GPAC version 1.0.1, consider restricting the use of t...
CVE-2021-31255: Buffer Copy without Checking Size of Input
Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-29279: Integer Overflow or Wraparound
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...