GPAC MP4Box Heap Overflow Vulnerability

GPAC is a set of open source multimedia framework . MP4Box is one of the multimedia wrapper . A heap overflow vulnerability exists in the 'urnRead' function in the isomedia/boxcodebase.c file of MP4Box in GPAC version 0.7.1. An attacker can exploit this vulnerability to cause a heap buffer...

DEBIAN-CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13006

CVE-2018-13006 is a GPAC/MP4Box vulnerability. The Debian DLA-1432-1 advisory reports two heap-based buffer over-reads in gpac: (1) CVE-2018-13005 in isomedia/box_code_base.c urn_Read (heap over-read due to a faulty while-loop condition) and (2) CVE-2018-13006 in isomedia/box_dump.c hdlr_dump (he...

CVE-2018-13006

Removed by vendor...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

UBUNTU-CVE-2018-13005

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

UBUNTU-CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13005: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-13006: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

PT-2018-3514

Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: A heap-based buffer over-read issue was discovered in the urn Read function in isomedia/box code base.c. This issue is related to a buffer over-read vulnerability in the GPAC multimedia platform, which can be...

PT-2018-3513

Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: A heap-based buffer over-read issue exists in the hdlr dump function, located in the isomedia/box dump.c file. This issue may allow a remote attacker to impact the confidentiality, integrity, and availability o...

CVE-2018-1000100

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

CVE-2018-1000100: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC MP4Box version 0.7.1 and earlier contains a Buffer Overflow vulnerability in src/isomedia/avcext.c lines 2417 to 2420 that can result in Heap chunks being modified, this could lead to RCE. This attack appear to be exploitable via an attacker supplied MP4 file that when run by the victim may...

PT-2018-3515

Name of the Vulnerable Software and Affected Versions: GPAC MP4Box versions 0.7.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the memory, which can be exploited to execute arbitrary code. This can be achieved by providing a specially crafted MP4 file to the...