250 matches found
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20167
Summary (CVE-2019-20167): GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a NULL pointer dereference in the function senc_Parse() within isomedia/box_code_drm.c . This is the root cause described across multiple feeds (NVD, Red Hat, Ubuntu, OSV, etc.). Impact stated in sources: potenti...
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20168
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a use-after-free in gf_isom_box_dump_ex() of isomedia/box_funcs.c. The vulnerability is a memory-management bug observed during box dump handling, with the impact described as potential crashes or undefined behavior. No exploit specifics ...
CVE-2019-20168
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...
CVE-2019-20169
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...
CVE-2019-20169
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...
CVE-2019-20171
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...
GPAC Buffer Overflow Vulnerability (CNVD-2019-40502)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in audiosampleentryAddBox in isomedia/boxcodebase.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of servic...
GPAC Memory Leakage Vulnerability
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in dinfRead in isomedia/boxcodebase.c in GPAC 0.7.1. No detailed vulnerability details are provided at this time...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
Null pointer dereference
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
Memory corruption
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
UBUNTU-CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21015
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
CVE-2018-21015
CVE-2018-21015 affects GPAC 0.7.1: AVC_DuplicateConfig() in isomedia/avc_ext.c may dereference a NULL cfg pointer when processing crafted files, causing a denial of service. Documents indicate this vulnerability is fixed in GPAC updates (e.g., GPAC 0.8.0 and later) via vendor advisories (Debian/M...
CVE-2018-21017
GPAC 0.7.1 is affected by a memory leak in dinf_Read (isomedia/box_code_base.c) related to CVE-2018-21017. The CVE is documented across multiple sources (NVD/NASL/Red Hat/Ubuntu mentions) and has CVSS v3.1 base score 6.5 (network, low complexity, user interaction required) with a high impact on a...