PT-2022-11256 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.2 Description: A Segmentation fault caused by null pointer dereference exists in Gpac via the avc parse slice function in av parsers.c when using mp4box, which causes a denial of service. Recommendations: For Gpac...

PT-2022-11259 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: Gpac versions through 1.0.1 Description: A segmentation fault issue exists via the gf odf size descriptor function in desc private.c when using mp4box, causing a denial of service. Recommendations: For Gpac versions through 1.0.1, consider...

PT-2022-11277 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command. This is due to a problem in the gf hinter track finalize function. Recommendations: For GPAC version 1.0.1,...

PT-2022-13608 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to a Segmentation Fault caused by MP4Box -lsr in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later t...

PT-2022-13725 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.1.0-DEV Description: The issue is related to an infinite loop in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the issue...

PT-2022-16713 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.1-DEV Description: The issue is related to an Integer Overflow or Wraparound in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1-DEV, update to version 2.1-DEV or later to resolve the issue...

PT-2022-18249 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master Description: The issue is related to a use-after-free vulnerability in the gf node get attribute by tag function. This vulnerability can lead to memory corruption and potentially allow a...

PT-2022-18250 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC mp4box version 1.1.0-DEV-rev1663-g881c6a94a-master Description: The issue is related to an Integer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2022-26724 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions 2.1-DEV-rev368-gfd054169b-master Description: A heap buffer overflow issue was discovered via the function FixSDTPInTRAF at isomedia/isom intern.c. This issue affects GPAC and is related to a heap buffer overflow. Recommendation...

PT-2022-26726 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf isom get meta item info at /isomedia/meta.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, as...

PT-2022-26727 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC versions 2.1-DEV-rev368-gfd054169b-master Description: A segmentation violation was discovered in GPAC via the function gf dump vrml sffield at /scene manager/scene dump.c. This issue was identified through the National Vulnerability...

PT-2022-27474 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev478-g696e6f868-master Description: A heap use-after-free issue was discovered via the Q IsTypeOn function at /gpac/src/bifs/unquantize.c. This issue affects the specified version of GPAC. Recommendations: For GPAC...

PT-2022-5597 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC affected versions not specified Description: The issue is related to the function svg parse preserveaspectratio of the SVG Parser component in the GPAC multimedia platform. It is caused by incorrect clearing or freeing of resources,...

PT-2022-19553

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a Null Pointer Dereference vulnerability in the gf isom parse movie boxes internal function due to improper return value handling of GF SKIP BOX, causing a Denial o...

PT-2020-10608

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. The issue is related to an invalid pointer dereference in the gf odf delete descriptor function in odf/des...

PT-2020-10606

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the BS ReadByte function, which is called from gf bs read bit in utils/bitstream.c. This can cause a denial of service when a crafted MP4 file is processed...

PT-2019-5481

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to the gf text get utf8 line function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for szLineConv. This can potentially...

PT-2021-10990

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 1.0.1 Description: A NULL pointer dereference issue exists in the function dump isom sdp located in filedump.c, allowing an attacker to cause Denial of Service. Recommendations: For versions prior to 1.0.1, update to...

PT-2022-13689

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.1.0-DEV Description A null pointer dereference caused a segmentation fault in the GitHub repository gpac/gpac. Recommendations For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later to resolve the issue...

PT-2020-6620

Name of the Vulnerable Software and Affected Versions gpac versions prior to 1.0.1 Description The issue is related to a buffer overflow vulnerability in the gf fprintf function in os file.c of the gpac multimedia platform. This vulnerability allows attackers to execute arbitrary code, potentiall...