gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5970298926137344 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f20cc351440 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

Denial of service(DoS) in GPAC version 0.8.0

In GPAC GPAC version 0.8.0 a Denial of serviceDoS exists in the GPAC 0.8.0-e10d39d-master branch that can be attacked via a malicious image file resulting in DoS. An attacker can exploit this vulnerability by submitting a malicious media file that exploits this issue. This will result in a Denial...

GSD-2021-1000000 Denial of service(DoS) in GPAC version 0.8.0

In GPAC GPAC version 0.8.0 a Denial of serviceDoS exists in the GPAC 0.8.0-e10d39d-master branch that can be attacked via a malicious image file resulting in DoS. An attacker can exploit this vulnerability by submitting a malicious media file that exploits this issue. This will result in a Denial...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. The function gfhevcreadppsbsinternal function in mediatools/avparsers.c causes a loop when a malicious file, pps-numtilecolumns larger than sizeofpps-columnwidth results in a heap overflow in the loop...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The function filtercore/filterpck.c:gffilterpcknewallocinternal allows attackers to cause a denial of service via a NULL pointer dereference...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. In the adtsdmxprocess function in filters/reframeadts.c , a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

Information Disclosure

gpac is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by reading memory via a crafted file in the MP4Box command via the gfhintertracknew function...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The MergeTrack function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The HintFile function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the abstboxread function in MP4Box in GPAC...

Denial Of Service (DoS)

gpac:sid is vulnerable to Denial Of Service DoS. There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. An invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c allows an attacker to execute arbitrary code on the host OS...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a Null Pointer Dereference, when gffilterpckgetdata is called...

PT-2021-6762

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality, where a specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic. This results in a...

PT-2021-6763

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. It involves an integer overflow vulnerability due to unchecked...

PT-2021-6467

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the absence of result checking for an arithmetic operation in the pcrb decoder functionality of the GPAC multimedia platform's MPEG-4 decoding. This...

PT-2021-6776

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer truncation vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause improper memory allocation, resultin...

PT-2021-6772

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to integer overflow vulnerabilities in the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked...