PT-2022-11254 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A Segmentation fault caused by a floating point exception exists in Gpac, which causes a denial of service. This issue is related to the naludmx enqueue or dispatch function in reframe nalu.c when usin...

PT-2022-11258 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A heap use after free issue exists via the mpgviddmx process function in reframe mpgvid.c when using mp4box, causing a denial of service due to a segmentation fault. Recommendations: For Gpac versions...

PT-2022-11260 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A buffer overflow issue exists via a malformed MP4 file in the svc parse slice function in av parsers.c, allowing attackers to cause a denial of service, potentially execute code, and escalate...

PT-2022-11270 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to v1.0.1 Description: The issue is related to an infinite loop vulnerability in the ISOBMFF reader filter, specifically in the isoffin read.c file. The isoffin process function can result in a Denial of Service DoS due to...

PT-2022-11278 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command, specifically through the GetHintFormat function. Recommendations: For GPAC version 1.0.1, consider disabling the...

PT-2022-7655 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.1.0 Description: The issue is related to a null pointer dereference in the gpac multimedia platform. This can be exploited to cause a denial of service. The vulnerability is being actively exploited in the wild, with...

PT-2023-1156 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.3.0-DEV Description: The issue is related to a Use After Free condition in the gpac/gpac multimedia platform, specifically concerning the gf odf vvc cfg read bs function. This condition involves the use of memory...

PT-2023-15164 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Buffer Overflow in the gf text process sub function of filters/load text.c. This function is part of the GPAC MP4box, which is used for processing and...

PT-2023-15165 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to an Integer overflow vulnerability in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8316. Recommendations: For GPAC MP4box versi...

PT-2023-15167 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a Null pointer dereference in the m2tsdmx declare pid function, located in filters/dmx m2ts.c:343. This problem can be exploited via the m2tsdmx declare pid...

PT-2023-15168 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a buffer overflow in the hevc parse vps extension function of media tools/av parsers.c. This function is used for parsing video parameters, and the buffer...

PT-2023-1542 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev505-gb9577e6ad-master Description: The issue is related to a memory leak via the afrt box read function at box code adobe.c. This can be exploited by a remote attacker to cause a denial of service. The memory leak is d...

PT-2023-15450 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the eac3 update channels function, located in the media tools/av parsers.c file at line 9113. This function is part of the GPAC MP4box...

PT-2023-15452 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev617-g85ce76efd Description: The issue is related to a Buffer Overflow in the gf hevc read sps bs internal function of media tools/av parsers.c at line 8273. Recommendations: For GPAC MP4box version...

PT-2023-15455 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev644-g5c4df2a67 Description: The issue is related to a Buffer Overflow in the gf bs read data function. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

PT-2023-15457 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is related to a Buffer Overflow that occurs via the media tools/av parsers.c file, specifically at line 4988 in the gf media nalu add emulation bytes function. This can...

PT-2023-15458 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is caused by infinite recursion in the Media GetSample function, located in isomedia/media.c:662, leading to a segment fault or stack overflow. Recommendations: For GPAC...

PT-2023-15459 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is related to a buffer overflow in the h263dmx process function, specifically in the reframe h263.c file at line 609. This buffer overflow occurs in the h263dmx process...

PT-2023-16516 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.2 Description: The issue is a stack-based buffer overflow in the gpac repository on GitHub. Recommendations: For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

PT-2023-16547 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3.0-DEV Description: The issue is related to an off-by-one error in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.3.0-DEV, update to version 2.3.0-DEV or later to resolve the issue...