5722 matches found
CVE-2021-30020
In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...
CVE-2021-30020
GPAC 1.0.1 contains a heap overflow in gf_hevc_read_pps_bs_internal (media_tools/av_parsers.c) where a crafted file may cause pps->num_tile_columns to exceed the size of pps->column_width, leading to a heap overflow. Multiple sources corroborate this CVE-2021-30020 vulnerability (NVD, CNVD/...
CVE-2021-30199
CVE-2021-30199 affects GPAC 1.0.1: a Null Pointer Dereference in filters/reframe_latm.c when gf_filter_pck_get_data is called; the first argument pck may be NULL with a crafted MP4, leading to a crash. Public records corroborate this vulnerability in GPAC. No explicit exploit details are provided...
CVE-2021-30199
Removed by vendor...
CVE-2021-30019
Removed by vendor...
CVE-2021-30015
Removed by vendor...
CVE-2021-29279
Removed by vendor...
CVE-2021-30014
GPAC contains an integer overflow in media_tools/av_parsers.c (hevc_parse_slice_segment) affecting v0.9.0-preview through 1.0.1, leading to a crash. The issue is described across CVE-2021-30014 and CNVD-2021-30183; multiple sources corroborate the overflow in GPAC’s av_parsers.c. Severity metrics...
CVE-2021-30022
There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...
CVE-2021-30019
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
CVE-2021-29279
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...
CVE-2021-30014
There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...
CVE-2021-30199
In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...
CVE-2021-31261
The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...
CVE-2021-31257
The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-31255
Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-31257
The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
DEBIAN-CVE-2021-31255
Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...