Lucene search
+L

2008 matches found

OSV
OSV
added 2022/04/08 12:0 a.m.23 views

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

6.7AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/08 12:0 a.m.9 views

GPAC mp4box资源管理错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master, which...

5.5CVSS6.9AI score0.00713EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/04/08 12:0 a.m.6 views

GPAC mp4box 输入验证错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and others. A security vulnerability exists in GPAC mp4box, which stems from vulnerability to integer...

5.5CVSS7AI score0.00786EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/08 12:0 a.m.18 views

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

6.8AI score
SaveExploits0References4
CVE
CVE
added 2022/04/08 12:0 a.m.100 views

CVE-2022-27147

CVE-2022-27147 affects GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master with a use-after-free in function gf_node_get_attribute_by_tag. The NVD entry reports a MEDIUM base score (CVSSv3.1: 5.5) with LOCAL exploitability and user interaction required, and a LOW integrity/availability impact (HIGH f...

5.5CVSS5.7AI score0.00713EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.11 views

The vulnerability of the Media_RewriteODFrame function in the MP4Box command of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the MediaRewriteODFrame function in the MP4Box module of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.3AI score0.00752EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.12 views

The vulnerability of the gf_media_export Filters function in the MP4Box command of the GPAC multimedia platform, which allows a violator to cause a service failure.

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.3AI score0.00752EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.11 views

The vulnerability of the gf_hinter_finalize function in the MP4Box multimedia platform of GPAC allows a perpetrator to cause a service failure.

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.3AI score0.00752EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.10 views

The vulnerability of the DumpTrackInfo function in the MP4Box command of the GPAC multimedia platform, related to pointer assignment errors, allows a violator to trigger a service failure.

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.3AI score0.00752EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.10 views

The vulnerability of the abst_box_size function in the MP4Box command of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the abstboxsize function in the MP4Box command of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.3AI score0.00868EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.26 views

The vulnerability of the URL_GetProtocolType function in the MP4Box multimedia platform’s command allows a hacker to induce a service failure.

The vulnerability of the URLGetProtocolType function in the MP4Box multimedia platform of GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created file...

7.1CVSS6.8AI score0.01195EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.12 views

The vulnerability of the stbl_AppendSize function in the MP4Box multimedia platform of GPAC allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

10CVSS7.2AI score0.01271EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.16 views

The vulnerability of the gf_odf_desc_copy function in the MP4Box tool of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the gfodfdesccopy function in the MP4Box tool of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.6AI score0.00868EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.14 views

The vulnerability of the gf_isom_vp_config_get function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure.

The vulnerability of the gfisomvpconfigget function in the MP4Box multimedia platform of GPAC is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.1CVSS6.6AI score0.00752EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.12 views

The vulnerability of the def_parent_box_new function in the MP4Box component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data.

The vulnerability of the defparentboxnew function in the MP4Box component of the GPAC multimedia platform is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data through a...

7.1CVSS6.7AI score0.00992EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.9 views

The vulnerability of the hevc_parse_vps_extension function in the MP4Box component of the GPAC multimedia platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hevcparsevpsextension function in the MP4Box component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS7.4AI score0.01274EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.22 views

The vulnerability of the infe_box_read function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the infeboxread function in the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to confidential data through a specially created file...

7.1CVSS7.1AI score0.00911EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.11 views

The vulnerability of the gf_isom_get_root_od function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the gfisomgetrootod function in the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially creat...

7.1CVSS7.2AI score0.00911EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.12 views

The vulnerability of the trak_box_size function in the MP4Box command of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the trakboxsize function in the MP4Box multimedia platform’s command set is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

6.5CVSS6.3AI score0.00868EPSS
SaveExploits1References5Affected Software2
Veracode
Veracode
added 2022/03/31 3:44 p.m.18 views

Denial Of Service (DoS)

GPAC is vulnerable to denial of service. The vulnerability exists due to a Use After Free through MP4Box...

5.5CVSS2.5AI score0.00691EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder