Heap overflow

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22673

GPAC MP4Box 0.8.0 is affected by CVE-2020-22673 due to a memory leak in the senc_Parse function, which can allow an attacker to trigger a denial of service via crafted input. Impact is a DoS with partial availability impact per CVSS. No exploit details are provided beyond the CVE entry; remediati...

CVE-2020-22675

The CVE-2020-22675 issue affects GPAC 0.8.0 where GetGhostNum in stbl_read.c has a heap-based buffer overflow that can cause a Denial of Service via crafted input. This is documented across multiple feeds (NVD/Numerous OSV/NASL entries) and is not a vendor patch detail in the core CVE entry. Some...

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22674

GPAC vulnerability CVE-2020-22674 affects gpac 0.8.0. An invalid memory dereference in FixTrackID (isom_intern.c) allows DoS via crafted input. Affected component is the GPAC MPEG-4 Systems implementation; impact is denial of service with potential crash. Remediation: upgrade to a newer GPAC rele...

CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22674

Removed by vendor...

CVE-2020-22675

Removed by vendor...

CVE-2020-22677

GPAC 0.8.0 is affected by CVE-2020-22677 due to a heap-based buffer overflow in dump_data_hex() within box_dump.c, which can cause a denial of service via crafted input. This vulnerability is confirmed across multiple feeds (NVD/CNVD/OSV/Gentoo GLSA), and remediation is to upgrade to a newer GPAC...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

Removed by vendor...

CVE-2020-22679

Removed by vendor...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22679

GPAC MP4Box (gpac 0.8.0) has a memory leak in sgpd_parse_entry that can cause DoS via a crafted input (CVE-2020-22679). The issue is documented across multiple sources; exploitation status is not provided in the supplied documents. Remediation: upgrade GPAC to a newer version; GLSA-202408-21 reco...

CVE-2020-22678

GPAC CVE-2020-22678 affects gpac 0.8.0. The vulnerability is a heap-based buffer overflow in the gf_media_nalu_remove_emulation_bytes function (av_parsers.c) that can trigger a denial of service via crafted input. Connected sources corroborate the same issue across multiple advisories; no explici...

CVE-2020-22678

Removed by vendor...

gpac MP4Box安全漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...

gpac MP4Box安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...