CVE-2021-21838

Removed by vendor...

CVE-2021-21838

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

CVE-2021-21837

CVE-2021-21837 affects the GPAC Project on Advanced Content library, specifically the MPEG-4 decoding path in version 1.0.1 . The root cause is an unchecked arithmetic operation that can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. Exploitation requi...

CVE-2021-21844

GPAC Project on Advanced Content library v1.0.1 contains multiple exploitable integer overflow vulnerabilities in its MPEG-4 decoding path. Specifically, the stco FourCC handling can trigger unchecked arithmetic, causing a heap-based buffer overflow and memory corruption when processing crafted M...

CVE-2021-21843

CVE-2021-21843 affects GPAC Project on Advanced Content library 1.0.1 (MPEG-4 decoding). A 32‑bit integer overflow in the integer handling during decoding (after validating range counts) can cause heap-based buffer overflow and memory corruption. An attacker can entice a user to open a crafted MP...

CVE-2021-21846

The CVE-2021-21846 issue affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A specially crafted MPEG-4 input in the stsz decoder triggers an unchecked arithmetic path that can overflow and lead to a heap-based buffer overflow, causing memory...

CVE-2021-21846

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21846

Removed by vendor...

CVE-2021-21845

GPAC Project on Advanced Content library (GPAC) version 1.0.1 contains multiple CVE-2021-21845 family integer overflow flaws in MPEG-4 decoding. Specifically, the issue is triggered in the stsc decoder (and related atoms/FOURCC paths) where unchecked arithmetic can overflow and allocate/offset me...

CVE-2021-21845

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

CVE-2021-21847 affects the GPAC Project on Advanced Content library (version 1.0.1) and is due to an unchecked arithmetic path in the MPEG-4 decoding for the MPEG-4 atom/parsing, specifically the stts decoder, leading to an integer overflow and a heap-based buffer overflow that causes memory corr...

CVE-2021-21847

Removed by vendor...

CVE-2021-21851

Removed by vendor...

CVE-2021-21851

CVE-2021-21851 affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A crafted MPEG-4 input in the csgp decoder sample group description indices triggers unchecked arithmetic, causing a heap-based buffer overflow and memory corruption. Impact i...

CVE-2021-21852

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains multiple exploitable integer overflow flaws in the MPEG-4 decoding path, specifically a heap-based buffer overflow triggered by unchecked arithmetic in the stss decoder. This can lead to memory corruption when a user opens a crafted ...

CVE-2021-21852

Removed by vendor...

Siemens JT2Go DGN File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

CVE-2020-23333

A heap-based buffer overflow exists in the AP4CttsAtom::AP4CttsAtom component located in /Core/Ap4Utils.h of Bento4 version 06c39d9. This can lead to a denial of service DOS...

CVE-2020-23332

A heap-based buffer overflow exists in the AP4StdcFileByteStream::ReadPartial component located in /StdC/Ap4StdCFileByteStream.cpp of Bento4 version 06c39d9. This issue can lead to a denial of service DOS...