PT-2023-15458 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is caused by infinite recursion in the Media GetSample function, located in isomedia/media.c:662, leading to a segment fault or stack overflow. Recommendations: For GPAC...

PT-2023-15459 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is related to a buffer overflow in the h263dmx process function, specifically in the reframe h263.c file at line 609. This buffer overflow occurs in the h263dmx process...

PT-2023-16508 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to V2.1.0-DEV. Description: The issue is a Heap-based Buffer Overflow. It affects the GitHub repository gpac/gpac. Recommendations: For versions prior to V2.1.0-DEV, update to V2.1.0-DEV or later to resolve the issue...

PT-2023-16516 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2 Description: The issue is a stack-based buffer overflow in the gpac repository on GitHub. Recommendations: For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

PT-2023-16546 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: A buffer over-read issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information available about real-world incidents where th...

PT-2023-16547 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: The issue is related to an off-by-one error in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3.0-DEV, update to version 2.3.0-DEV or later to resolve the issue...

PT-2023-16548 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3.0-DEV Description: The issue is a Heap-based Buffer Overflow. It affects the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3.0-DEV, update to version 2.3.0-DEV or later to resolve the...

PT-2023-16570 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3.0-DEV Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices and details about real-world incidents are not provided. Recommendations: For...

PT-2023-17148 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.4.0 Description: The issue is related to a Denial of Service in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue...

PT-2023-17149 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.4.0 Description: A Heap-based Buffer Overflow issue has been identified. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incident...

PT-2023-21684 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is an out-of-bounds read in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2023-21689 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.2.2 Description: The issue is related to a Divide By Zero error in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2023-22544 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to a NULL Pointer Dereference in the gpac repository on GitHub. This problem affects devices that use the gpac package prior to version 2.2.2. Recommendations: For versions prior ...

PT-2023-22549 · Gpac +3 · Gpac +3

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2.2 Description: The issue is related to an unchecked return value in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...

PT-2021-6596 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function vwid box del located in box code base.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. This issue can be exploited by a remot...

PT-2021-10987 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: An issue was discovered in the abst box read function in box code adobe.c, which has a heap-based buffer over-read. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 or later to...

PT-2022-11270 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to v1.0.1 Description: The issue is related to an infinite loop vulnerability in the ISOBMFF reader filter, specifically in the isoffin read.c file. The isoffin process function can result in a Denial of Service DoS due to...

Debian DLA-1432-1 : gpac security update

Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read. CVE-2018-13006 Due to an error in a strlen call, there is a heap-based buffer over-read in the...

[SECURITY] [DLA 1432-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u1 CVE ID : CVE-2018-13005 CVE-2018-13006 Debian Bug : 902782 Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer...

Debian: Security Advisory (DLA-1432-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...