Denial Of Service (DoS)

gpac is vulnerable to denial of serviceDoS. The vulnerability exists in the gflistcount in utils/list.c due to an invalid pointer dereference, allowing a malicious user to crash the application via a crafted MP4 file...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. The vulnerability exist because it contains an invalid pointer dereference that can be activated by a crafted MP4 file causing a denial of service...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A use-after-free in gfm2tsprocesspmt in mediatools/mpegts.c allows an attacker to crash the application via a malicious MP4 file...

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. The vulnerability existed because it contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. The vulnerability exists as processing a mp4 file can cause buffer overflow in src/isomedia/avcext.c...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer over-read could occur through the function hdlrdump in isomedia/boxdump.c...

Buffer Over-read

gpac:xenial is vulnerable to buffer over-read. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

Arbitrary Code Execution

GPAC is vulnerable to arbitrary code execution. The gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write due to the mishandling of a certain -1 return value...

Arbitrary Code Execution

GPAC is vulnerable to arbitrsry code execution. A buffer overflow in the gfmediaavcreadsps function in mediatools/avparsers.c allows an attacker to execute arbitrary code on the host OS...

Buffer Overflow

GPAC is vulnerable to a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

Out Of Bound Write

gpac:xenial is vulnerable to out-of-bound writes. gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

Arbitrary Code Execution

GPAC is vulnerable to arbitrary code execution. A buffer overflow vulnerability occurs in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames. This allows an attacker to execute arbitrary code on the host OS...

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the GPAC multimedia platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform GPAC is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the cat_multiple_files function in the GPAC multimedia platform, related to the occurrence of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the catmultiplefiles function on the GPAC multimedia platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the hdlr_dump function on the GPAC multimedia platform, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdlrdump function on the GPAC multimedia platform relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the gf_media_avc_read_sps function on the GPAC multimedia platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfmediaavcreadsps function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GPAC multimedia platform is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...