CVE-2023-0217

CVE-2023-0217 is an OpenSSL vulnerability: an invalid pointer dereference on read when validating a malformed DSA public key via EVP_PKEY_public_check(), likely crashing the application and enabling denial of service. Affected context in connected documents confirms OpenSSL-related advisories and...

CVE-2023-0217 NULL dereference validating DSA public key

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

CVE-2023-0216

A flaw was found in OpenSSL. An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2iPKCS7, d2iPKCS7bio or d2iPKCS7fp functions. This may result in an application crash which could lead to a denial of service. The TLS implementati...

PT-2023-8452

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVP PKEY public check function. This will most likely lead to an...

CVE-2023-0217

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...

Arbitrary Code Execution

gpac is vulnerable to arbitrary code execution. An invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c allows an attacker to execute arbitrary code on the host OS...

CVE-2021-29605: Integer Overflow or Wraparound

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2021-30586)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the SetupWriters function in isomedia/isomstore.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2021-30587)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the gfhintertrackfinalize function in mediatools/isomhinter.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

CVE-2020-35981

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c...

DEBIAN-CVE-2020-35982

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

Null pointer dereference

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

Null pointer dereference

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c...

UBUNTU-CVE-2020-35982

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...

CVE-2020-35981

CVE-2020-35981 affects GPAC versions 0.8.0 and 1.0.1, with an invalid pointer dereference in isomedia/isom_store.c SetupWriters(). The connected sources confirm the root cause and affected component, but do not provide exploitation details or practical workflow. Impact is described across referen...

CVE-2020-35982

GPAC: CVE-2020-35982 involves an invalid pointer dereference in gf_hinter_track_finalize() (media_tools/isom_hinter.c) affecting GPAC 0.8.0 and 1.0.1. Connected sources corroborate the vulnerability and indicate a remediation path: upgrade to GPAC 2.2.0 or newer (as advised by Gentoo GLSA-202408-...

CVE-2020-35981

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters in isomedia/isomstore.c...

CVE-2020-35981

Removed by vendor...

CVE-2020-35982

Removed by vendor...

PT-2021-11892

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function SetupWriters in isomedia/isom store.c, which leads to an invalid pointer dereference. Recommendations: For GPAC version 0.8.0, there is no information abou...