CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

Removed by vendor...

CVE-2021-28300

GPAC v0.5.2 contains a NULL Pointer Dereference in isomedia/track.c MergeTrack() that can be triggered by uploading a malicious MP4, allowing remote attackers to execute arbitrary code or cause a Denial-of-Service. This is reflected across multiple sources (CVE-2021-28300, Red Hat, Debian OSV, CN...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

GPAC 0.8.0 suffers from a denial of service vulnerability

GPAC is a framework for the development of multimedia for research and academia. A denial of service vulnerability exists in GPAC 0.8.0, which can be exploited by an attacker to cause a denial of service attack...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service DoS. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

Use-After-Free

GPAC is vulnerable to use-after-free. The vulnerability existed because audiosampleentryRead in isomedia/boxcodebase.c is arbitrary on when to make gfisomboxdel calls...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS. The vulnerability exists in audiosampleentryAddBox function in isomedia/boxcodebase.c, allowing a malicious user to cause an application crash via a crafted file...

Null Pointer Dereference

GPAC is vulnerable to null point dereference. The vulnerability exist because there is a NULL pointer dereference in the function gfisomgetoriginalformattype at isomedia/drmsample.c in libgpac.a...

Null Pointer Dereference

GPAC is vulnerable to null pointer dereference. The vulnerability exist in the function GetESD at isomedia/track.c...

Buffer Overflow

GPAC is vulnerable to buffer overflow. The vulnerability existed in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function gfisomgetmediadatasize in isomedia/isomread.c allows an attacker to crash the application...

NULL Pointer Dereference

GPAC is vulnerable to null pointer dereference. An invalid pointer dereference in the function GFIPMPXAUTHDelete in odf/ipmpxcode.c could cause system crash...

Buffer Overflow

GPAC is vulnerable to buffer overflow. An attacker is able to cause a heap-based buffer overflow by entering a value larger than the limit in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...

Buffer Overflow

GPAC is vulnerable to buffer overflow. The vulnerability existed because of a heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function gfodfavccfgwritebs in odf/descriptors.c allows an attacker to crash the application...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c allows an attacker to crash the application...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS. The vulnerability exists due to stack-based buffer-overflow in the dimCRead function in boxcode3gp.c, allowing an attacker to crash the application...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A heap-based buffer over-read in BSReadByte called from gfbsreadbit in utils/bitstream.c allows an attacker to crash the application via a malicious MP4 file...