DEBIAN-CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

Design/Logic Flaw

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

DEBIAN-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

DEBIAN-CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

CVE-2018-20761

Removed by vendor...

CVE-2018-20760

Removed by vendor...

CVE-2018-20762

CVE-2018-20762 affects GPAC up to version 0.7.1, with a buffer overflow in the cat_multiple_files function of mp4box/fileimport.c when processing a local directory with crafted filenames. Multiple advisories (Ubuntu USN-3926-1, Debian DLA-1693-1, Mageia MGASA-2019-0146, OpenVAS entries, OSV feeds...

CVE-2018-20760

CVE-2018-20760 affects GPAC up to version 0.7.1, where gf_text_get_utf8_line in media_tools/text_import.c can cause an out-of-bounds write due to mishandled -1 return. Ubuntu/Debian advisories and OSV entries group this with other GPAC flaws (memory operation handling, buffer overflows) and warn ...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20761

GPAC 0.7.1 and earlier are affected by a Buffer Overflow in gf_sm_load_init (scene_manager.c) of libgpac_static.a. The issue is described across multiple advisories (USN-3926-1, MGASA/OSV/DLA entries) and can cause a crash and, in some disclosures, potentially arbitrary code execution when a spec...

CVE-2018-20763

Removed by vendor...

CVE-2018-20762

Removed by vendor...

CVE-2018-20763

GPAC vulnerability CVE-2018-20763 affects GPAC 0.7.1 and earlier; the issue is an out-of-bounds write in gf_text_get_utf8_line (media_tools/text_import.c) caused by missing szLineConv bounds checking. This memory-operations/bounds issue is associated with the GPAC MP4Box utility and can impact th...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...