GPAC mp4box 输入验证错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and others. A security vulnerability exists in GPAC mp4box, which stems from vulnerability to integer...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27147: Use After Free

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

GPAC mp4box资源管理错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master, which...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27148: Integer Overflow or Wraparound

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27146: Out-of-bounds Write

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

CVE-2022-27145: Out-of-bounds Write

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27147

CVE-2022-27147 affects GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master with a use-after-free in function gf_node_get_attribute_by_tag. The NVD entry reports a MEDIUM base score (CVSSv3.1: 5.5) with LOCAL exploitability and user interaction required, and a LOW integrity/availability impact (HIGH f...

CVE-2022-27145

GPAC mp4box (GPAC) vulnerability CVE-2022-27145: a stack overflow in gf_isom_get_sample_for_movie_time affects mp4box 1.1.0-DEV-rev1727-g8be34973d-master. Debian security advisory DSA-5411-1 fixes this in gpac via updated packages (e.g., 1.0.1+dfsg1-4+deb11u2); Gentoo GLSA also references an upgr...

MP4Box Media Rewrite Buffer Overflow DoS

The vulnerability of the MediaRewriteODFrame function in the MP4Box module of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box gf_hinter_finalize Heap Buffer Overflow DoS

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Filter Heap Buffer Overflow DoS

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box URL GetProtocolType DoS

The vulnerability of the URLGetProtocolType function in the MP4Box multimedia platform of GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created file...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the abstboxsize function in the MP4Box command of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box stbl_AppendSize Heap Buffer Overflow DoS

The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...