Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to handle ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box 1.1.0 suffers from a buffer overflow vulnerability that can be exploited by attackers to...

CVE-2021-41459

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample function szXmlFrom parameter which leads to a denial of service vulnerability...

CVE-2021-41457

There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmxnhml.c in nhmldmxinitparsing which leads to a denial of service vulnerability...

CVE-2021-41456

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1004 in the nhmldmxsendsample function szXmlTo parameter which leads to a denial of service vulnerability...

CVE-2021-41457

There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmxnhml.c in nhmldmxinitparsing which leads to a denial of service vulnerability...

GPAC stack buffer overflow vulnerability

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. hevcparsevpsextension function in MP4Box in GPAC version 1.0.1 is vulnerable to a stack buffer overflow. An attacker could exploit the vulnerability via specially crafted files to cause a denial of service or...

GPAC null pointer dereference vulnerability (CNVD-2021-79760)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the DumpTrackInfo function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in t...

GPAC Memory Leak Vulnerability (CNVD-2021-79759)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the defparentboxnew function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC null pointer dereference vulnerability (CNVD-2021-79762)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomvpconfigget function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

GPAC Memory Leak Vulnerability (CNVD-2021-79757)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomoinfreadentry function in MP4Box in GPAC version 1.0.1 is vulnerable to a memory leak. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC null pointer dereference vulnerability (CNVD-2021-79753)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfodfdesccopy function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted file in the MP4Box...

GPAC null pointer dereference vulnerability (CNVD-2021-79755)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. abstboxsize function in GPAC version 1.0.1 is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box comma...

GPAC null pointer dereference vulnerability (CNVD-2021-79756)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the trakboxsize function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the...

GPAC Memory Leak Vulnerability (CNVD-2021-79763)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the infeboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC Memory Leak Vulnerability (CNVD-2021-79761)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a memory leak vulnerability exists in the afraboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit the vulnerability to read memory via specially crafted files...

GPAC Memory Leak Vulnerability (CNVD-2021-79764)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. gfisomgetrootod function in MP4Box in GPAC version 1.0.1 is vulnerable to a memory leak. An attacker could exploit the vulnerability to read memory via specially crafted files...

CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-33363

Memory leak in the infeboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-33361

Memory leak in the afraboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-32139

The gfisomvpconfigget function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...