CVE-2021-32134: NULL Pointer Dereference

The gfodfdesccopy function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-33363: Missing Release of Memory after Effective Lifetime

Memory leak in the infeboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-32132: NULL Pointer Dereference

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. hevcparsevpsextension function in MP4Box in GPAC version 1.0.1 is vulnerable to a stack buffer overflow. An attacker could exploit the vulnerability via specially crafted files to cause a denial of service or...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. abstboxsize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box comma...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomvpconfigget function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

PT-2021-6581

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a heap buffer overflow in the URL GetProtocolType function of the MP4Box command in the GPAC multimedia platform. This can be exploited by a remote attacker using a specially crafted file,...

CVE-2021-33365: Missing Release of Memory after Effective Lifetime

Memory leak in the gfisomgetrootod function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-32138: NULL Pointer Dereference

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-33361

Memory leak in the afraboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-33365

Memory leak in the gfisomgetrootod function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-33361

CVE-2021-33361 affects GPAC’s MP4Box (GPAC 1.0.1) with a memory leak in afra_box_read that allows memory read via a crafted file. Connected sources confirm GPAC as the vulnerable component and describe the underlying issue and potential impact as memory leakage, with multiple advisories noting mi...

PT-2021-6535 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the afra box read function in MP4Box, a component of the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acces...

PT-2021-6545 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 1.0.1 Description: The issue is related to a memory leak in the def parent box new function of the MP4Box component in the GPAC multimedia platform. This leak occurs due to incorrect memory deallocation before the last reference...

PT-2021-6519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the infe box read function of the MP4Box component in the GPAC multimedia platform. This allows attackers to read memory via a crafted file, potentially giving them acce...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the trakboxsize function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the...

CVE-2021-33365

Memory leak in the gfisomgetrootod function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the infeboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

CVE-2021-33366: Missing Release of Memory after Effective Lifetime

Memory leak in the gfisomoinfreadentry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-33362: Out-of-bounds Write

Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...