CVE-2019-11222

gfbin128parse in utils/osdivers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafteddrmfile.xml file...

CVE-2019-11222

gfbin128parse in utils/osdivers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafteddrmfile.xml file...

CVE-2019-11221

GPAC 0.7.1 has a buffer overflow issue in gfimportmessage in mediaimport.c...

CVE-2019-11221

GPAC 0.7.1 has a buffer overflow issue in gfimportmessage in mediaimport.c...

CVE-2019-11221

Removed by vendor...

CVE-2019-11221

CVE-2019-11221 affects GPAC 0.7.1 with a buffer overflow in gf_import_message() (media_import.c). Supported by OSV/NVD entries, the vulnerability is confirmed; CVSS vectors indicate a high impact with local access required and potential for data integrity/availability disruption, though exploitat...

PT-2019-12197

Name of the Vulnerable Software and Affected Versions GPAC version 0.7.1 Description The issue is related to a buffer overflow in the gf import message function, located in the media import.c file. Recommendations For GPAC version 0.7.1, at the moment, there is no information about a newer versio...

PT-2019-12198

Name of the Vulnerable Software and Affected Versions GPAC version 0.7.1 Description The issue is related to a buffer overflow in the gf bin128 parse function, located in utils/os divers.c, which occurs when the crypt feature encounters a crafted drm file.xml file. Recommendations For GPAC versio...

CVE-2019-11221: Out-of-bounds Write

GPAC 0.7.1 has a buffer overflow issue in gfimportmessage in mediaimport.c...

CVE-2019-11222: Out-of-bounds Write

gfbin128parse in utils/osdivers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafteddrmfile.xml file...

Updated gpac packages fix security vulnerability

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

MGASA-2019-0146 Updated gpac packages fix security vulnerability

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

Ubuntu: Security Advisory (USN-3926-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : GPAC vulnerabilities (USN-3926-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3926-1 advisory. It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked int...

USN-3926-1: GPAC vulnerabilities

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

Debian DLA-1693-1 : gpac security update

Several issues have been found by different authors in gpac, an Open Source multimedia framework for research and academic purposes. The issues are basically all buffer overflows in different functions all over the package. For Debian 8 'Jessie', these problems have been fixed in version...

[SECURITY] [DLA 1693-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u2 CVE ID : CVE-2018-7752 CVE-2018-20760 CVE-2018-20761 CVE-2018-20762 CVE-2018-20763 Several issues have been found by different authors in gpac, an Open Source multimedia framework for research and academic purposes. The issues are basically all...

Debian: Security Advisory (DLA-1693-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1693-1 gpac - security update

Bulletin has no description...

Buffer overflow

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...