CVE-2019-20169

Removed by vendor...

CVE-2019-20169

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

CVE-2019-20171

Removed by vendor...

CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

CVE-2019-20166: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomdump in isomedia/boxdump.c...

PT-2019-16103

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A memory leak was found in the dinf New function located in isomedia/box code base.c. Recommendations For GPAC version 0.8.0, update to a version that fixes the memory leak...

PT-2019-16113

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A use-after-free issue was found in the function gf isom box dump ex in isomedia/box funcs.c. Recommendations For GPAC version 0.8.0, update to a version that fixes this issue...

PT-2019-16117

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in GPAC, which results in memory leaks. The memory leaks occur in the metx New function in isomedia/box code base.c and the abst Read function in...

CVE-2019-20159: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinfNew in isomedia/boxcodebase.c...

CVE-2019-20162: Out-of-bounds Write

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gfisomboxparseex in isomedia/boxfuncs.c...

CVE-2019-20164: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...

CVE-2019-20167: NULL Pointer Dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...

CVE-2019-20168: Use After Free

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

CVE-2019-20169: Use After Free

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...

CVE-2019-20171: Missing Release of Memory after Effective Lifetime

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

PT-2019-16112

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A NULL pointer dereference issue was discovered in the function senc Parse in the file isomedia/box code drm.c. Recommendations For GPAC version 0.8.0, update to a version late...

PT-2019-16109

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which results in a NULL pointer dereference. Recommendations For GPAC version 0.8.0, there is n...

PT-2019-16114

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function trak Read in isomedia/box code base.c, which results in a use-after-free. Recommendations For GPAC version 0.8.0, update to a version th...

GPAC Memory Leakage Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in dinfRead in isomedia/boxcodebase.c in GPAC 0.7.1. No detailed vulnerability details are provided at this time...

GPAC Buffer Overflow Vulnerability (CNVD-2019-40502)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in audiosampleentryAddBox in isomedia/boxcodebase.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of servic...