CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

PT-2021-19226

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the MergeTrack function. Recommendations For...

PT-2021-19220

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the tenc box read function in MP4Box, allowing attackers to potentially cause a denial of service or execute arbitrary code via a crafted file. This issue is related to invalid I...

PT-2021-19221

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the abst box read function within MP4Box in GPAC, allowing attackers to potentially cause a denial of service or execute arbitrary code by using a crafted file. No information is...

PT-2021-19222

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A memory leak in the stbl GetSampleInfos function in MP4Box allows attackers to read memory via a crafted file. Recommendations For GPAC version 1.0.1, at the moment, there is no information about a newer version...

PT-2021-19224

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom set extraction slc...

PT-2021-19227

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to read memory via a crafted file in the MP4Box command, specifically through the gf hinter track new function. Recommendations For GPAC version 1.0.1, consider restricting the use of t...

CVE-2021-31255: Buffer Copy without Checking Size of Input

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31261: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31259: NULL Pointer Dereference

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-19223

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the HintFile function. Recommendations For GPA...

CVE-2021-31257: NULL Pointer Dereference

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31254: Out-of-bounds Write

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31256: Missing Release of Memory after Effective Lifetime

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31258: NULL Pointer Dereference

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31260: NULL Pointer Dereference

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31262: NULL Pointer Dereference

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-19228

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the AV1 DuplicateConfig function...

PT-2021-19225

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom cenc get default info...