PT-2021-6573

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An integer overflow vulnerability exists within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic,...

PT-2021-6482

Name of the Vulnerable Software and Affected Versions GPAC versions 1.0.1 Description The issue is related to the co64 decoder functionality in the GPAC multimedia platform, specifically in the MPEG-4 decoding. It involves incorrect checking of the result of an arithmetic operation, which can lea...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5982417379786752 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f556c0a29d0 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

gpac:fuzz_parse: Stack-use-after-return in on_aom_av1_eos

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5111254667624448 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-use-after-return WRITE 4 Crash Address: 0x7f3ff0361038 Crash State:...

Denial Of Service (DoS)

gpac is vulnerable to denial of service DoS. The vulnerability exists through the dumpisomsdp function in filedump.c...

Out-of-Bounds Read

gpac is vulnerable to out-of-bounds read. The vulnerability exists due to a heap-based buffer over-read...

Buffer Over-read

gpac:bullseye is vulnerable to buffer over-read. The abstboxread function in boxcodeadobe.c has a heap-based buffer over-read.gpac:bullseye...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. A NULL pointer dereference in the function nhmldumpsendheader in writenhml.c an attacker to crash the application...

PT-2021-6511

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a stack buffer overflow in the hevc parse vps extension function in MP4Box, a component of the GPAC multimedia platform. This allows attackers to cause a denial of service or execute...

PT-2021-6470 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom get root od function of the MP4Box component in the GPAC multimedia platform. This allows a remote attacker to access confidential data by using a specially...

PT-2021-6605

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the Media RewriteODFrame function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote...

PT-2021-6604

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf media export filters function in the MP4Box command of the GPAC multimedia platform, which is associated with NULL pointer dereference errors. This allows a remote attacker to cause...

GPAC Integer Overflow Vulnerability (CNVD-2022-04965)

GPAC is an open source multimedia framework. GPAC 1.0.1 is vulnerable to integer overflow, which can be exploited by attackers to cause assignment failures...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6573214919688192 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000041b41 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

PT-2021-6450

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the trak box size function in the MP4Box command, which allows attackers to cause a denial of service due to a NULL pointer dereference. This can be achieved by using a crafted file. The...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2021-30587)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the gfhintertrackfinalize function in mediatools/isomhinter.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC heap buffer overflow vulnerability (CNVD-2021-30584)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in the gprtpbuilderdoavc function in ietf/rtppckmpeg4.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC Reuse After Release Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A post-release reuse vulnerability exists in the gfisomboxdel function in isomedia/boxfuncs.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC heap buffer overflow vulnerability (CNVD-2021-30198)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in the abstboxread function in boxcodeadobe.c in versions of GPAC prior to 1.0.1. No detailed vulnerability details are provided at this time...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30199)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the nhmldumpsendheader function in writenhml.c in GPAC 20200801 and earlier. An attacker could exploit this vulnerability to cause a denial of service...