UBUNTU-CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

UBUNTU-CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

UBUNTU-CVE-2022-27146

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

UBUNTU-CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27148

CVE-2022-27148 : GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to an integer overflow. The connected Gentoo advisory (GLSA-2024-08-21) suggests upgrading GPAC to a newer release (e.g., gpac-2.2.0) as a resolution. Other sources (NVD/OSV/NASL) reaffirm the same affected package and...

CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27148

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27146

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

CVE-2022-27146

CVE-2022-27146: GPAC mp4box (1.1.0-DEV-rev1759-geb2d1e6dd) suffers a heap-buffer-overflow in gf_isom_apple_enum_tag. Public documents confirm the issue but do not provide exploit details. The Gentoo GLSA 202408-21 indicates upgrades to latest GPAC (gpac-2.2.0) as the remediation. Other sources re...

CVE-2022-27146

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master,...

GPAC mp4box资源管理错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master, which...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

GPAC mp4box 输入验证错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and others. A security vulnerability exists in GPAC mp4box, which stems from vulnerability to integer...

CVE-2022-27145

GPAC mp4box (GPAC) vulnerability CVE-2022-27145: a stack overflow in gf_isom_get_sample_for_movie_time affects mp4box 1.1.0-DEV-rev1727-g8be34973d-master. Debian security advisory DSA-5411-1 fixes this in gpac via updated packages (e.g., 1.0.1+dfsg1-4+deb11u2); Gentoo GLSA also references an upgr...

CVE-2022-27147

CVE-2022-27147 affects GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master with a use-after-free in function gf_node_get_attribute_by_tag. The NVD entry reports a MEDIUM base score (CVSSv3.1: 5.5) with LOCAL exploitability and user interaction required, and a LOW integrity/availability impact (HIGH f...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

The vulnerability of the Media_RewriteODFrame function in the MP4Box command of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the MediaRewriteODFrame function in the MP4Box module of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...