Null pointer dereference

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

Command injection

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

UBUNTU-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40607

The CVE-2021-40607 issue affects GPAC 1.0.1, where the schm_box_size function can be triggered by a crafted file processed by MP4Box, leading to a denial of service. Public sources consistently describe the vulnerability as a DoS condition without indicating exploitable code execution. Affected c...

CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

GPAC 1.0.1 is affected by CVE-2021-40608: the gf_hinter_track_finalize function can be triggered by a crafted MP4Box file to cause a denial of service. The vulnerability is derived from improper handling of error messages in gf_hinter_track_finalize. Debian security advisory DSA-5411-1 notes that...

CVE-2021-40609

GPAC 1.0.1 is affected by CVE-2021-40609 due to GetHintFormat vulnerability that allows DoS via a crafted MP4Box file. Debian/DSA-5411 fixes upgrade to 1.0.1+dfsg1-4+deb11u2; other advisories recommend upgrading to newer GPAC versions. No exploitation details in provided documents.

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40944

GPAC MP4Box 1.1.0 is affected by CVE-2021-40944 due to a Null pointer reference in gf_filter_pid_get_packet (src/filter_core/filter_pid.c:5394), which can cause a denial of service. Public sources consistently describe this vulnerability in GPAC and reference multiple advisories (e.g., Debian DSA...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 1.0.1, which originates from the schmboxsize function. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

GPAC 代码问题漏洞

GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

GPAC 安全漏洞

GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework. a denial of service vulnerability exists in GPAC version 1.0.1, which originates from the gfbswritedata function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...