PT-2022-19553

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a Null Pointer Dereference vulnerability in the gf isom parse movie boxes internal function due to improper return value handling of GF SKIP BOX, causing a Denial o...

PT-2020-10607

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. It contains an invalid pointer dereference in the gf list count function in utils/list.c. Recommendations...

PT-2022-19552

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a failed assertion in the BS ReadByte function located in utils/bitstream.c, which causes a Denial of Service. Recommendations For GPAC version...

PT-2019-5484

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to a mishandled return value. This can potentially impact the...

PT-2022-11276

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command. This is due to a problem in the schm box size function. Recommendations For GPAC version 1.0.1, consider avoiding...

PT-2022-16712

Name of the Vulnerable Software and Affected Versions gpac/gpac versions prior to 2.1-DEV Description The issue is related to a Use After Free condition in the gpac/gpac GitHub repository. Recommendations For versions prior to 2.1-DEV, update to version 2.1-DEV or later to resolve the issue...

PT-2019-6174

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description The issue is related to an invalid memory read in the gf m2ts process pmt function within the media tools/mpegts.c component of the GPAC multimedia platform. This can cause a denial of service when a...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

PT-2021-10988 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function nhmldump send header located in write nhml.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For gpac versions...

PT-2022-11259 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A segmentation fault issue exists via the gf odf size descriptor function in desc private.c when using mp4box, causing a denial of service. Recommendations: For Gpac versions through 1.0.1, consider...

PT-2022-17325 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to a NULL Pointer Dereference in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the...

PT-2022-5597 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC affected versions not specified Description: The issue is related to the function svg parse preserveaspectratio of the SVG Parser component in the GPAC multimedia platform. It is caused by incorrect clearing or freeing of resources,...

PT-2022-7433 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev232-gfcaa01ebb-master Description: The issue is related to a stack overflow when processing ISOM IOD, which can be exploited to cause a denial of service. It is also described as a buffer overflow vulnerability in the...

PT-2023-15159 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a segmentation violation via the function gf sm load init swf at scene manager/swf parse.c. No information is provided about the estimated number of potentiall...

PT-2023-15162 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow that occurs via the gf vvc read sps bs internal function in the media tools/av parsers.c file. This function is part of the GPAC MP4box, whic...

PT-2023-15166 · Unknown +2 · Gpac Mp4Box +2

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a heap use-after-free vulnerability. It occurs via the file filters/dmx m2ts.c at line 470 in the m2tsdmx declare pid function. This vulnerability can be...

PT-2023-15456 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67 Description: The issue is related to an integer overflow in the isomedia/isom write.c file of GPAC MP4Box. Recommendations: For GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67, consider restricting...

PT-2023-24094 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.2.2 Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where...

PT-2020-6634 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function ilst item box dump located in box dump.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. This issue can be exploited by a remo...

PT-2021-10989 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...