Lucene search
+L

7521 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•5 views

CVE-2021-28300: NULL Pointer Dereference

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS6.4AI score0.02082EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•3 views

PT-2021-17842

Name of the Vulnerable Software and Affected Versions: GPAC version 0.5.2 Description: A NULL pointer dereference issue exists in the isomedia/track.c module's MergeTrack function, allowing attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

9.8CVSS0.02082EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•17 views

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

9.8CVSS6.2AI score0.02082EPSS
SaveExploits1References2
OSS-Fuzz
OSS-Fuzz
•added 2021/04/10 2:38 p.m.•8 views

gpac:fuzz_parse: Stack-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5475902680072192 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffcaae88b00 Crash State: gfstrdu...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/04/01 4:56 a.m.•6 views

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6389891240951808 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f9f9f84ddb0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

5.8AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/23 1:22 a.m.•6 views

gpac:fuzz_parse: Heap-use-after-free in gf_isom_box_del

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4511231290507264 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000a8 Crash State:...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/03/13 12:00 a.m.•9 views

GPAC 0.8.0 suffers from a denial of service vulnerability

GPAC is a framework for the development of multimedia for research and academia. A denial of service vulnerability exists in GPAC 0.8.0, which can be exploited by an attacker to cause a denial of service attack...

7AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:35 p.m.•15 views

gpac:fuzz_parse: Stack-use-after-return in on_aom_av1_eos

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4638007761174528 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-use-after-return WRITE 4 Crash Address: 0x7f7651e06838 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 2:25 p.m.•6 views

gpac:fuzz_parse: Heap-buffer-overflow in stsz_box_read

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5080378604912640 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6140000001f0 Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:52 a.m.•12 views

gpac:fuzz_parse: Heap-buffer-overflow in gf_strdup

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5479477149827072 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address: 0x602000000138 Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2021/03/10 9:43 a.m.•6 views

gpac:fuzz_parse: Segv on unknown address in gf_list_count

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5026573989314560 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gflistcount...

5.8AI score
SaveExploits0
Veracode
Veracode
•added 2020/12/15 10:27 a.m.•25 views

Denial Of Service (DoS)

GPAC is vulnerable to denial of service DoS. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

5.5CVSS2.7AI score0.0123EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2020/12/06 4:34 a.m.•24 views

Use-After-Free

GPAC is vulnerable to use-after-free. The vulnerability existed because audiosampleentryRead in isomedia/boxcodebase.c is arbitrary on when to make gfisomboxdel calls...

9.8CVSS2.5AI score0.0154EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2020/12/06 4:18 a.m.•24 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS. The vulnerability exists in audiosampleentryAddBox function in isomedia/boxcodebase.c, allowing a malicious user to cause an application crash via a crafted file...

6.5CVSS2.9AI score0.01382EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2020/12/06 4:06 a.m.•26 views

Null Pointer Dereference

GPAC is vulnerable to null point dereference. The vulnerability exist because there is a NULL pointer dereference in the function gfisomgetoriginalformattype at isomedia/drmsample.c in libgpac.a...

7.5CVSS2.4AI score0.01655EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2020/12/06 4:06 a.m.•36 views

Null Pointer Dereference

GPAC is vulnerable to null pointer dereference. The vulnerability exist in the function GetESD at isomedia/track.c...

5.5CVSS2.6AI score0.00932EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2020/12/06 4:06 a.m.•27 views

Buffer Overflow

GPAC is vulnerable to buffer overflow. The vulnerability existed in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a...

7.8CVSS4.2AI score0.01181EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2020/12/06 3:51 a.m.•21 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function gfisomgetmediadatasize in isomedia/isomread.c allows an attacker to crash the application...

5.5CVSS3.8AI score0.0078EPSS
SaveExploits1References2Affected Software2
Veracode
Veracode
•added 2020/12/06 3:37 a.m.•24 views

NULL Pointer Dereference

GPAC is vulnerable to null pointer dereference. An invalid pointer dereference in the function GFIPMPXAUTHDelete in odf/ipmpxcode.c could cause system crash...

5.5CVSS2.8AI score0.00854EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2020/12/06 3:37 a.m.•26 views

Buffer Overflow

GPAC is vulnerable to buffer overflow. The vulnerability existed because of a heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

5.5CVSS4AI score0.00896EPSS
SaveExploits1References3Affected Software2
Rows per page
Query Builder