CVE-2021-31255

CVE-2021-31255 concerns GPAC, specifically a buffer overflow in the abst_box_read function of MP4Box in GPAC 1.0.1. The vulnerability can lead to denial of service or arbitrary code execution via a crafted MP4 file. Several connected sources corroborate this issue across multiple databases and ad...

CVE-2021-31256

CVE-2021-31256 affects GPAC 1.0.1’s MP4Box via a memory leak in stbl_GetSampleInfos that allows memory reads from a crafted file. Affected software/version: GPAC 1.0.1. Underlying cause: memory leak in stbl_GetSampleInfos. Impact: information disclosure via crafted input. Mitigation: upgrade to G...

CVE-2021-31261

CVE-2021-31261 affects GPAC 1.0.1; the gf_hinter_track_new path allows memory read via a crafted MP4Box input. The impact is information disclosure (read memory) with local access and, per sources, user interaction may be required. Mitigation: upgrade GPAC to a newer release (Gentoo GLSA 202408-2...

CVE-2021-31257

GPAC 1.0.1 contains a vulnerability in the HintFile function that can cause a denial of service via a crafted MP4Box file (NULL pointer dereference). Several sources (CVE-2021-31257 entries in NVD/OSV/CNVD, CNC-derived advisories) confirm the issue. Affected component: GPAC, vulnerable function: ...

CVE-2021-31255

Removed by vendor...

CVE-2021-31262

Removed by vendor...

CVE-2021-31259

Removed by vendor...

CVE-2021-31257

Removed by vendor...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the HintFile function in GPAC version 1.0.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of service...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the AV1DuplicateConfig function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the filtercore/filterpck.c:gffilterpcknewallocinternal function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in GPAC version 1.0.1 in filters/reframelatm.c when calling gffilterpckgetdata. An attacker could exploit this vulnerability via a specially crafted mp4 file to...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30188)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

Null pointer dereference

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...