CVE-2021-33364: Missing Release of Memory after Effective Lifetime

Memory leak in the defparentboxnew function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. hevcparsevpsextension function in MP4Box in GPAC version 1.0.1 is vulnerable to a stack buffer overflow. An attacker could exploit the vulnerability via specially crafted files to cause a denial of service or...

CVE-2021-33364

CVE-2021-33364 affects GPAC 1.0.1 where a memory leak in the def_parent_box_new function of MP4Box can allow reading memory via a crafted file. The vulnerability is documented across multiple sources (including NVD and CNVD) and has been acknowledged in Debian's gpac security advisory, which note...

PT-2021-6591

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the DumpTrackInfo function in the MP4Box command, which allows attackers to cause a denial of service via a crafted file. This is due to a NULL pointer dereference error. The exploitation ...

PT-2021-6556

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf isom vp config get function in the MP4Box command of the GPAC multimedia platform. It is associated with NULL pointer dereference errors. Exploitation of this issue allows a remote...

PT-2021-6538

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf odf desc copy function in the MP4Box command, which allows attackers to cause a denial of service NULL pointer dereference via a crafted file. This can be exploited by a remote...

CVE-2021-33365

GPAC 1.0.1 is affected by CVE-2021-33365: a memory leak in gf_isom_get_root_od() inside MP4Box can be exploited by a crafted file to read memory. Debian advisory confirms fixes in gpac 1.0.1+dfsg1-4+deb11u2; other sources (CNVD) corroborate GPAC memory-leak/vulnerability. Impact is partial confid...

CVE-2021-33364

Memory leak in the defparentboxnew function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. abstboxsize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box comma...

CVE-2021-33365

Removed by vendor...

CVE-2021-33361

Removed by vendor...

CVE-2021-33366

Removed by vendor...

CVE-2021-33364

Removed by vendor...

CVE-2021-33363

Removed by vendor...

Denial Of Service (DoS)

gpac:bullseye is vulnerable to denial of service. The gfdashsegmenterprobeinput function in GPAC v0.8 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

GPAC Project Advanced Content MPEG-4 Decoding multiple integer addition overflow vulnerabilities

Summary Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer...

GPAC null pointer dereference vulnerability (CNVD-2021-82991)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the MediaRewriteODFrame function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted fil...

GPAC null pointer dereference vulnerability (CNVD-2021-82989)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfmediaexportfilters function in GPAC version 1.0.1 is vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the...

GPAC Buffer Overflow Vulnerability (CNVD-2021-82990)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a buffer overflow vulnerability exists in the stblAppendSize function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service or...

GPAC null pointer dereference vulnerability (CNVD-2021-82988)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfhinterfinalize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...