159 matches found
CVE-2022-47095
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevcparsevpsextension function of mediatools/avparsers.c...
CVE-2022-47657
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by CVE-2022-47657 due to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c:7662). The connected advisories indicate vendor-specific fixes: Debian's DSA-5411-1 patching to gpac 1.0.1+dfsg1-4+deb11u2, Gentoo GLSA-202408-21 reco...
CVE-2022-47089
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gfvvcreadspsbsinternal function of mediatools/avparsers.c...
CVE-2022-47089
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gfvvcreadspsbsinternal function of mediatools/avparsers.c...
CVE-2022-47092
GPAC MP4box 2.1-DEV-rev574-g9d5bb184 contains an integer overflow in gf_hevc_read_sps_bs_internal (media_tools/av_parsers.c:8316). Public-facing sources in the provided documents confirm this CVE-2022-47092 issue and its basic impact (CVSS v3.1: HIGH, with local attack vector, no privileges requi...
CVE-2022-47653
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3updatechannels function of mediatools/avparsers.c:9113...
CVE-2022-47661
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...
CVE-2022-47092
Removed by vendor...
CVE-2022-47087
Removed by vendor...
The vulnerability of the gf_m2ts_section_complete function in the media_tools/mpegts component of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfm2tssectioncomplete function in the mediatools/mpegts component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MP4 file...
The vulnerability of the gf_m2ts_process_pmt function in the media_tools/mpegts.c component of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfm2tsprocesspmt function in the mediatools/mpegts.c component of the GPAC multimedia platform is related to reading data from buffer memory beyond its allowable limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a speciall...
WordPress DeMomentSomTres Media Tools Auto plugin <= 2.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress DeMomentSomTres Media Tools Auto plugin versions = 2.0. Solution No patched version available...
WordPress DeMomentSomTres Media Tools Auto plugin <= 2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress DeMomentSomTres Media Tools Auto plugin versions = 2.0. Solution No patched version available...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. The vulnerability exists due to an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...
CVE-2020-35982
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...
UBUNTU-CVE-2020-35982
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...
CVE-2020-35982
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...
CVE-2020-35982
An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gfhintertrackfinalize in mediatools/isomhinter.c...