UBUNTU-CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...

PT-2022-16712

Name of the Vulnerable Software and Affected Versions gpac/gpac versions prior to 2.1-DEV Description The issue is related to a Use After Free condition in the gpac/gpac GitHub repository. Recommendations For versions prior to 2.1-DEV, update to version 2.1-DEV or later to resolve the issue...

PT-2020-10604

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A Use-After-Free issue can cause a denial of service via a crafted MP4 file. The issue is located in the gf m2ts process pmt function in media tools/mpegts.c, as demonstrated by MP4Box. Recommendations...

PT-2020-10606

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the BS ReadByte function, which is called from gf bs read bit in utils/bitstream.c. This can cause a denial of service when a crafted MP4 file is processed...

PT-2019-6174

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description The issue is related to an invalid memory read in the gf m2ts process pmt function within the media tools/mpegts.c component of the GPAC multimedia platform. This can cause a denial of service when a...

PT-2022-19553

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a Null Pointer Dereference vulnerability in the gf isom parse movie boxes internal function due to improper return value handling of GF SKIP BOX, causing a Denial o...

PT-2019-5481

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for szLineConv. This can potentially...

PT-2021-10990

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: A NULL pointer dereference issue exists in the function dump isom sdp located in filedump.c, allowing an attacker to cause Denial of Service. Recommendations: For versions prior to 1.0.1, update to...

PT-2022-13689

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.1.0-DEV Description A null pointer dereference caused a segmentation fault in the GitHub repository gpac/gpac. Recommendations For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the issue...

PT-2020-6620

Name of the Vulnerable Software and Affected Versions gpac versions prior to 1.0.1 Description The issue is related to a buffer overflow vulnerability in the gf fprintf function in os file.c of the gpac multimedia platform. This vulnerability allows attackers to execute arbitrary code, potentiall...

PT-2019-5482

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a buffer overflow in the cat multiple files function of the GPAC multimedia platform. This can be exploited to impact the confidentiality, integrity, and availability of...

PT-2022-19552

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a failed assertion in the BS ReadByte function located in utils/bitstream.c, which causes a Denial of Service. Recommendations For GPAC version...

PT-2023-3416

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.2.2 Description The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the xml sax parse function. This overflow can lead to a denial of service. Recommendations For...

PT-2019-13450

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the isomedia/isom read.c file of libgpac.a. This can cause a crash, as demonstrated by an issue in the gf m2ts sync function within media tools/mpegts.c...

PT-2019-5484

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to a mishandled return value. This can potentially impact the...

PT-2020-10607

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. It contains an invalid pointer dereference in the gf list count function in utils/list.c. Recommendations...

PT-2021-10988 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions through 20200801 Description: An issue exists in the function nhmldump send header located in write nhml.c, allowing an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For gpac versions...

PT-2022-11253 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions 1.0.1 and earlier Description: A null pointer deference issue exists via the naludmx parse nal avc function in reframe nalu, allowing a denial of service. Recommendations: For gpac versions 1.0.1 and earlier, consider disabling...

PT-2022-11259 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A segmentation fault issue exists via the gf odf size descriptor function in desc private.c when using mp4box, causing a denial of service. Recommendations: For Gpac versions through 1.0.1, consider...