CVE-2021-40567

Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gfodfsizedescriptor function in descprivate.c when using mp4box, which causes a denial of service...

CVE-2021-40569

Removed by vendor...

CVE-2021-40571

Removed by vendor...

CVE-2021-40574

Removed by vendor...

CVE-2021-40572

Removed by vendor...

CVE-2021-40570

Removed by vendor...

CVE-2021-40576

Removed by vendor...

CVE-2021-40575

Removed by vendor...

CVE-2021-40567

Removed by vendor...

CVE-2021-40575

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmxprocess function in reframempgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566...

CVE-2021-40576

GPAC GNU GPAC 1.0.1 contains a null pointer dereference in gf_isom_get_payt_count (hint_track.c) that allows denial of service via MP4Box. The CVE-2021-40576 entry is confirmed across multiple trusted sources (NVD, CNVD, Debian DSAs) and is associated with the GPAC multimedia framework. Exploitat...

CVE-2021-40571

GPAC mp4box 1.0.1 has a double-free in ilst_box_read (box_code_apple.c) that can cause denial of service and potentially code execution/privilege escalation. Debian fixes gpac to 1.0.1+dfsg1-4+deb11u2; upgrade recommended. Other connected sources corroborate GPAC vulnerabilities; no additional ex...

CVE-2021-40569

The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40571

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

CVE-2021-40576

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...

CVE-2021-40570

GPAC vulnerability CVE-2021-40570 affects the MP4Box binary in GPAC 1.0.1, where a double-free in avc_compute_poc (av_parsers.c) can lead to denial of service and may allow code execution with privilege escalation. Public sources confirm the issue and its impact; Debian advisory notes fixed versi...

CVE-2021-40565

A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...

CVE-2021-40564

A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avcparseslice function in avparsers.c when using mp4box, which causes a denial of service...