7521 matches found
PT-2019-16103
Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A memory leak was found in the dinf New function located in isomedia/box code base.c. Recommendations For GPAC version 0.8.0, update to a version that fixes the memory leak...
CVE-2019-20165: NULL Pointer Dereference
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...
CVE-2019-20160: Out-of-bounds Write
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...
PT-2019-16111
Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom dump in isomedia/box dump.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, update to a...
CVE-2019-20169: Use After Free
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...
CVE-2019-20161: Out-of-bounds Write
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...
CVE-2019-20168: Use After Free
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...
CVE-2019-20170: Release of Invalid Pointer or Reference
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GFIPMPXAUTHDelete in odf/ipmpxcode.c...
CVE-2019-20162: Out-of-bounds Write
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...
PT-2019-16108 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: An issue was discovered in the function gf odf avc cfg write bs in odf/descriptors.c, which leads to a NULL pointer dereference. Recommendations: For GPAC version 0.8.0, ther...
PT-2019-16116 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: An issue was discovered in the function GF IPMPX AUTH Delete in odf/ipmpx code.c, which contains an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, upda...
CVE-2019-20167: NULL Pointer Dereference
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
GPAC Buffer Overflow Vulnerability (CNVD-2019-40502)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in audiosampleentryAddBox in isomedia/boxcodebase.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of servic...
GPAC null pointer dereference vulnerability (CNVD-2019-40479)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in AVCDuplicateConfig in isomedia/avcext.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
DEBIAN-CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...