CVE-2019-12482: NULL Pointer Dereference

An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gfisomgetoriginalformattype at isomedia/drmsample.c in libgpac.a, as demonstrated by MP4Box...

CVE-2019-12483: Out-of-bounds Write

An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a, as demonstrated by MP4Box...

MGASA-2019-0146 Updated gpac packages fix security vulnerability

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

Updated gpac packages fix security vulnerability

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

Ubuntu 16.04 LTS / 18.04 LTS : GPAC vulnerabilities (USN-3926-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3926-1 advisory. It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked int...

USN-3926-1: GPAC vulnerabilities

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

Buffer overflow

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

DEBIAN-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20762

Removed by vendor...

CVE-2018-20762

CVE-2018-20762 affects GPAC up to version 0.7.1, with a buffer overflow in the cat_multiple_files function of mp4box/fileimport.c when processing a local directory with crafted filenames. Multiple advisories (Ubuntu USN-3926-1, Debian DLA-1693-1, Mageia MGASA-2019-0146, OpenVAS entries, OSV feeds...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20762: Improper Restriction of Operations within the Bounds of a Memory Buffer

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

UBUNTU-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

PT-2020-10608

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. The issue is related to an invalid pointer dereference in the gf odf delete descriptor function in odf/des...

PT-2019-5482

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a buffer overflow in the cat multiple files function of the GPAC multimedia platform. This can be exploited to impact the confidentiality, integrity, and availability of...

PT-2022-11276

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command. This is due to a problem in the schm box size function. Recommendations For GPAC version 1.0.1, consider avoiding...