GPAC Denial of Service Vulnerability (CNVD-2022-59868)

GPAC is a multimedia framework. a denial of service vulnerability exists in GPAC version 1.0.1, which originates from the GetHintFormat function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

GPAC Denial of Service Vulnerability (CNVD-2022-59871)

GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...

Integer Overflow in function lsr_translate_coords

Description Integer Overflow in function lsrtranslatecoords at laser/lsrdec.c:853 gpac version git log commit ea3af7c8242d1a82657dc3a518df5a5b1b5e27ed HEAD - master, origin/master, origin/HEAD Author: Romain Bouqueau Date: Tue Jun 28 19:25:58 2022 +0200 POC ./MP4Box -bt ./pocintof1s.dat...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. A remote attacker is able to cause denial of service conditions via the gfhintertrackfinalize function by injecting a maliciously crafted file through the MP4Box command...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists in the GetHintFormat function of hinttrack.c which allows an attacker to crash the application by providing a maliciously crafted file to the MP4Box command...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists in the gfhinterfinalize function of isomhinter.c, allowing an attacker to crash the application by providing a maliciously crafted file to the MP4Box command...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists through the heap-buffer-overflow in the schmboxread function of boxcodedrm.c because the function does not properly check the length of URI, allowing an attacker to crash the application by providing a maliciously crafted fil...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

CVE-2021-40607

The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40609

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-40609

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

CVE-2021-40606

The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40609

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...