199 matches found
CVE-2021-40609
GPAC 1.0.1 is affected by CVE-2021-40609 due to GetHintFormat vulnerability that allows DoS via a crafted MP4Box file. Debian/DSA-5411 fixes upgrade to 1.0.1+dfsg1-4+deb11u2; other advisories recommend upgrading to newer GPAC versions. No exploitation details in provided documents.
CVE-2021-40606
The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40609
Removed by vendor...
CVE-2021-40608
Removed by vendor...
CVE-2021-40608
GPAC 1.0.1 is affected by CVE-2021-40608: the gf_hinter_track_finalize function can be triggered by a crafted MP4Box file to cause a denial of service. The vulnerability is derived from improper handling of error messages in gf_hinter_track_finalize. Debian security advisory DSA-5411-1 notes that...
The vulnerability of the trak_box_size function in the MP4Box command of the GPAC multimedia platform allows a perpetrator to cause a service failure.
The vulnerability of the trakboxsize function in the MP4Box multimedia platform’s command set is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The DumpTrackInfo function in GPAC allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The trakboxsize function in GPAC allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac:sid is vulnerable to denial of service. The gfhinterfinalize function allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. The vulnerability exists in gfisomhintrtpread function which allows attackers to cause an application crash via a crafted file in the MP4Box command...
Heap Buffer Overflow
libgpac.so is vulnerable to heap-based buffer overflow. The vulnerability exists in gprtpbuilderdompeg12video function of rtppckmpeg12.c which allows an attacker to send crafted file in the MP4Box command causing an application crash...
GPAC Denial of Service Vulnerability (CNVD-2022-03627)
GPAC is an open source multimedia framework. gfdumpsetup function in GPAC version 1.0.1 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of a specially crafted MP4Box command...
GPAC Denial of Service Vulnerability (CNVD-2022-03626)
GPAC is an open source multimedia framework. gfisomhintrtpread function in GPAC version 1.0.1 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of a specially crafted MP4Box command...
CVE-2021-45292
The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...
CVE-2021-45291
The gfdumpsetup function in GPAC 1.0.1 allows malicoius users to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...
CVE-2021-45292
The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...
CVE-2021-45288
A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command...