2737 matches found
CVE-2022-47660
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isomwrite.c...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev593-g007bf61a0, which stems from...
CVE-2022-47663
GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is affected by a buffer overflow in h263dmx_process (filters/reframe_h263.c:609). Reported CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector and USER interaction required. Various security advisories (Debian DSA-5411-1, Gentoo GLSA 202408-21) advise up...
CVE-2022-47658
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by a buffer overflow in gf_hevc_read_vps_bs_internal (media_tools/av_parsers.c:8039). The CVE-2022-47658 entry is supported by multiple sources (NVD/OSV/GREL) indicating a HIGH-severity, local-exploitation vulnerability with potential impact to co...
CVE-2022-47086: Out-of-bounds Write
GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gfsmloadinitswf at scenemanager/swfparse.c...
CVE-2022-47662: Uncontrolled Recursion
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault /stack overflow due to infinite recursion in MediaGetSample isomedia/media.c:662...
CVE-2022-47093: Use After Free
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...
CVE-2022-47091: Buffer Copy without Checking Size of Input
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev505-gb9577e6ad-master, which...
CVE-2022-47088: Buffer Copy without Checking Size of Input
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...
CVE-2022-47653
GPAC MP4Box 2.1-DEV-rev593-g007bf61a0 is affected by a Buffer Overflow in eac3_update_channels (media_tools/av_parsers.c:9113). Root cause: overflow in eac3_update_channels function. Impact: High on confidentiality, integrity, and availability; attack vector LOCAL with LOW complexity and NO privi...
CVE-2022-47657
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by CVE-2022-47657 due to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c:7662). The connected advisories indicate vendor-specific fixes: Debian's DSA-5411-1 patching to gpac 1.0.1+dfsg1-4+deb11u2, Gentoo GLSA-202408-21 reco...
CVE-2022-47086
GPAC MP4Box vulnerability CVE-2022-47086: a segmentation violation is triggered by gf_sm_load_init_swf in scene_manager/swf_parse.c affecting GPAC MP4Box v2.1-DEV-rev574-g9d5bb184. The issue is documented in multiple sources (NVD/NV D details) with CVSS 3.1 base score 5.5 (Medium) and a local att...
CVE-2022-47095
CVE-2022-47095 affects GPAC MP4box 2.1-DEV-rev574-g9d5bb184, vulnerable to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c). The impact is reported as high (CVE-3.1 metrics: LOCAL, HIGH/CONF, HIGH/AV, with user interaction required). Connected sources confirm the vulnerabi...
CVE-2022-47091
GPAC MP4box 2.1-DEV-rev574-g9d5bb184 is affected by a Buffer Overflow in gf_text_process_sub within filters/load_text.c. The vulnerability can lead to denial of service or potentially arbitrary code execution. Debian has published a security update fixing multiple GPAC CVEs (including CVE-2022-47...
CVE-2022-47093
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...
CVE-2022-47094
CVE-2022-47094 affects GPAC MP4box 2.1-DEV-rev574-g9d5bb184, with a NULL pointer dereference in filters/dmx_m2ts.c:343 (m2tsdmx_declare_pid). The CVE is linked to GPAC vulnerabilities that have led to advisories (Debian DSA-5411-1 and Gentoo GLSA-202408-21) recommending upgrading to patched GPAC ...
CVE-2022-47088
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...
CVE-2022-47088
GPAC MP4Box 2.1-DEV-rev574-g9d5bb184b is vulnerable to a Buffer Overflow. The issue affects GPAC’s MP4Box component and is tracked as CVE-2022-47088 with a high impact (CONF/I/AV(H) = High) and local access required. Mitigation from Gentoo advisory GLSA-202408-21 recommends upgrading to GPAC 2.2....