CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27145

GPAC mp4box (GPAC) vulnerability CVE-2022-27145: a stack overflow in gf_isom_get_sample_for_movie_time affects mp4box 1.1.0-DEV-rev1727-g8be34973d-master. Debian security advisory DSA-5411-1 fixes this in gpac via updated packages (e.g., 1.0.1+dfsg1-4+deb11u2); Gentoo GLSA also references an upgr...

CVE-2022-27146: Out-of-bounds Write

GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27145: Out-of-bounds Write

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27147: Use After Free

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

GPAC mp4box资源管理错误漏洞

Gpac MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC mp4box version 1.1.0-DEV-rev1727-g8be34973d-master, which...

CVE-2022-27147

CVE-2022-27147 affects GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master with a use-after-free in function gf_node_get_attribute_by_tag. The NVD entry reports a MEDIUM base score (CVSSv3.1: 5.5) with LOCAL exploitability and user interaction required, and a LOW integrity/availability impact (HIGH f...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

CVE-2022-27148: Integer Overflow or Wraparound

GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...

CVE-2022-27145

Removed by vendor...

CVE-2022-27147

Removed by vendor...

MP4Box Filter Heap Buffer Overflow DoS

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Media Rewrite Buffer Overflow DoS

The vulnerability of the MediaRewriteODFrame function in the MP4Box module of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box gf_hinter_finalize Heap Buffer Overflow DoS

The vulnerability of the gfhinterfinalize function in the MP4Box multimedia platform of GPAC is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box URL GetProtocolType DoS

The vulnerability of the URLGetProtocolType function in the MP4Box multimedia platform of GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created file...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the abstboxsize function in the MP4Box command of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

MP4Box stbl_AppendSize Heap Buffer Overflow DoS

The vulnerability of the stblAppendSize function in the MP4Box multimedia platform of GPAC involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...