CVE-2019-20170

GPAC version 0.8.0 and 0.9.0-development-20191109 contains an invalid pointer dereference in GF_IPMPX_AUTH_Delete() (odf/ipmpx_code.c). The connected advisories (e.g., Debian DLA-2072, MGASA, OpenVAS/Nessus entries) corroborate CVE-2019-20170, but no explicit impact or remediation details are pro...

CVE-2019-20170

Removed by vendor...

CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

CVE-2019-20171

CVE-2019-20171 affects GPAC versions 0.5.2 and 0.9.0-development-20191109, with memory leaks identified in metx_New (isomedia/box_code_base.c) and abst_Read (isomedia/box_code_adobe.c). This vulnerability is evidenced in multiple sources (NVD entry and Debian/MAGEIA advisories) and is part of a b...

CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

CVE-2019-20171

Removed by vendor...

GPAC code issue vulnerability (CNVD-2020-01651)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'GFIPMPXAUTHDelete' function in the odf/ipmpxcode.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109, which arises from a network system or product The vulnerability stems from an improper design or...

CVE-2019-20166: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomdump in isomedia/boxdump.c...

PT-2019-16105

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A stack-based buffer overflow issue exists in the av1 parse tile group function, located in media tools/av parsers.c. Recommendations For GPAC version 0.8.0, consider applying ...

CVE-2019-20171: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

CVE-2019-20159: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...

CVE-2019-20163: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfodfavccfgwritebs in odf/descriptors.c...

PT-2019-16107 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue exists in the function gf isom box parse ex located in isomedia/box funcs.c. Recommendations: For GPAC version 0.8.0, update to a version...

CVE-2019-20164: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...

PT-2019-16109

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which results in a NULL pointer dereference. Recommendations For GPAC version 0.8.0, there is n...

PT-2019-16117

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in GPAC, which results in memory leaks. The memory leaks occur in the metx New function in isomedia/box code base.c and the abst Read function in...

PT-2019-16113

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A use-after-free issue was found in the function gf isom box dump ex in isomedia/box funcs.c. Recommendations For GPAC version 0.8.0, update to a version that fixes this issue...

PT-2019-16114

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function trak Read in isomedia/box code base.c, which results in a use-after-free. Recommendations For GPAC version 0.8.0, update to a version th...

PT-2019-16103

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A memory leak was found in the dinf New function located in isomedia/box code base.c. Recommendations For GPAC version 0.8.0, update to a version that fixes the memory leak...

CVE-2019-20165: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...