337 matches found
GPAC code issue vulnerability (CNVD-2020-00231)
GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfisomboxdel' function of the isomedia/boxfuncs.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for a...
CVE-2019-20159
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...
CVE-2019-20159
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a memory leak in dinf_New() (isomedia/box_code_base.c). The CVE-2019-20159 entry describes this issue; connected sources (Red Hat, Ubuntu, OSV, CNVD, CVE/CVEList, Nessus notes) consistently identify a memory leak in the same function/file...
CVE-2019-20159
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...
CVE-2019-20162
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...
CVE-2019-20162
Removed by vendor...
CVE-2019-20164
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...
CVE-2019-20164
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...
CVE-2019-20164
Removed by vendor...
CVE-2019-20164
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a NULL pointer dereference in gf_isom_box_del() (isomedia/box_funcs.c), identified as CVE-2019-20164. The connected sources consistently describe this issue, but do not provide exploitation details, affected package releases beyond those ...
CVE-2019-20165
Removed by vendor...
CVE-2019-20166
The CVE-2019-20166 issue affects_GPAC versions 0.8.0 and 0.9.0-development-20191109, caused by a NULL pointer dereference in gf_isom_dump() inside isomedia/box_dump.c. Multiple feeds (NVD, Red Hat, OSV, Ubuntu/NASL) confirm the same root cause and affected component without presenting public expl...
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20167
Summary (CVE-2019-20167): GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a NULL pointer dereference in the function senc_Parse() within isomedia/box_code_drm.c . This is the root cause described across multiple feeds (NVD, Red Hat, Ubuntu, OSV, etc.). Impact stated in sources: potenti...
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20167
Removed by vendor...
CVE-2019-20168
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a use-after-free in gf_isom_box_dump_ex() of isomedia/box_funcs.c. The vulnerability is a memory-management bug observed during box dump handling, with the impact described as potential crashes or undefined behavior. No exploit specifics ...
CVE-2019-20168
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...