CVE-2020-35981

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c...

CVE-2020-35979

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-35979

GPAC 0.8.0 and 1.0.1 contain a heap-based buffer overflow in gp_rtp_builder_do_avc() (ietf/rtp_pck_mpeg4.c). Exploitation/impact details are not elaborated beyond this CVE, but related advisories recommend upgrading to GPAC >= 2.2.0 (e.g., Gentoo GLSA 202408-21). Monitor for updates and apply ...

CVE-2020-35981

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c...

CVE-2020-35982

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

CVE-2020-35981

Removed by vendor...

CVE-2020-35982

Removed by vendor...

CVE-2020-35982

GPAC: CVE-2020-35982 involves an invalid pointer dereference in gf_hinter_track_finalize() (media_tools/isom_hinter.c) affecting GPAC 0.8.0 and 1.0.1. Connected sources corroborate the vulnerability and indicate a remediation path: upgrade to GPAC 2.2.0 or newer (as advised by Gentoo GLSA-202408-...

CVE-2020-35981

CVE-2020-35981 affects GPAC versions 0.8.0 and 1.0.1, with an invalid pointer dereference in isomedia/isom_store.c SetupWriters(). The connected sources confirm the root cause and affected component, but do not provide exploitation details or practical workflow. Impact is described across referen...

CVE-2020-35979

Removed by vendor...

CVE-2020-35980

GPAC, versions 0.8.0 and 1.0.1, is affected by CVE-2020-35980 due to a use-after-free in gf_isom_box_del() (isomedia/box_funcs.c). Connected sources confirm this CVE and specify the underlying fault in the box deletion path. The Debian advisory notes multiple vulnerabilities in GPAC and provides ...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in the abstboxread function in boxcodeadobe.c in versions of GPAC prior to 1.0.1. No detailed vulnerability details are provided at this time...

CVE-2020-35980

Removed by vendor...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the gfhintertrackfinalize function in mediatools/isomhinter.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the dumpisomsdp function in filedump.c in versions of GPAC prior to 1.0.1. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-11891 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which is a use-after-free. Recommendations: For GPAC version 0.8.0, update to a version that fixes the...

CVE-2020-35980

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the SetupWriters function in isomedia/isomstore.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC memory leak vulnerability (CNVD-2021-30180)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC integer overflow vulnerability (CNVD-2021-30183)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in the hevcparseslicesegment function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability to cause a program crash...