34 matches found
DEBIAN-CVE-2023-37174
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...
UBUNTU-CVE-2022-47661
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...
GPAC 代码问题漏洞
GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...
UBUNTU-CVE-2022-29537
gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...
CVE-2022-1035
Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-24575
GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...
PT-2022-18146 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 2.0 Description: The issue is a heap-based buffer overflow in the gf base64 encode function. It can be triggered via MP4Box. Recommendations: For GPAC version 2.0, at the moment, there is no information about a newer version that...
DEBIAN-CVE-2021-32132
The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
DEBIAN-CVE-2021-32134
The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
GPAC 代码问题漏洞
GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomvpconfigget function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...
UBUNTU-CVE-2021-36584
An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gprtpbuilderdotx3g function in ietf/rtppck3gpp.c, as demonstrated by MP4Box. This can cause a denial of service DOS...
DEBIAN-CVE-2021-31262
The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
PT-2022-11278 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command, specifically through the GetHintFormat function. Recommendations: For GPAC version 1.0.1, consider disabling the...