Lucene search
+L

2479 matches found

CVE
CVE
•added 2021/07/21 5:15 p.m.•75 views

CVE-2020-19488

CVE-2020-19488 affects GPAC MP4Box 0.8.0 and is due to an invalid read in box_code_apple.c:119, leading to Denial of Service. The issue is consistently described across multiple sources (NVD entry and related advisories) as a vulnerability in GPAC’s MP4Box that can be triggered by reading ilst_it...

5.5CVSS5.2AI score0.008EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/07/21 5:15 p.m.•76 views

CVE-2020-19488

Removed by vendor...

5.5CVSS6.2AI score0.008EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2021/07/21 5:14 p.m.•50 views

CVE-2020-19481

Removed by vendor...

5.5CVSS6.9AI score0.01019EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/07/21 12:00 a.m.•19 views

Gpac MP4Box 代码问题漏洞

GPAC MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.GPAC MP4Box version 0.8.0 has a security vulnerability, which stems from an issue found in...

5.5CVSS5.6AI score0.008EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/21 12:00 a.m.•4 views

CVE-2020-19488: NULL Pointer Dereference

An issue was discovered in boxcodeapple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilstitemRead...

5.5CVSS5.8AI score0.008EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•29 views

Information Disclosure

gpac is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by reading memory via a crafted file in the MP4Box command via the gfhintertracknew function...

5.5CVSS3.1AI score0.0107EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•25 views

Denial Of Service (DoS)

gpac:sid is vulnerable to Denial Of Service DoS. The AV1DuplicateConfig function allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS5AI score0.00879EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•33 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The MergeTrack function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

5.5CVSS5.3AI score0.00872EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•24 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. An attacker is able to exploit the vulnerability via a crafted file in the MP4Box command via the gfisomsetextractionslc function...

5.5CVSS3.7AI score0.00872EPSS
SaveExploits1References3Affected Software2
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•19 views

Denial Of Service (DoS)

gpac:sid is vulnerable to denial of service. Memory leak in the stblGetSampleInfos function in MP4Box allows attackers to read memory via a crafted file...

5.5CVSS5.3AI score0.01061EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2021/05/26 3:43 a.m.•36 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The HintFile function allows attackers to cause a denial of service via a NULL pointer dereference by submitting a malicious file in the MP4Box command...

5.5CVSS4.6AI score0.00872EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2021/05/26 3:42 a.m.•19 views

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in the abstboxread function in MP4Box in GPAC...

7.8CVSS4AI score0.01472EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/08 12:00 a.m.•8 views

PT-2021-6470 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom get root od function of the MP4Box component in the GPAC multimedia platform. This allows a remote attacker to access confidential data by using a specially...

9.8CVSS6.6AI score0.04615EPSS
SaveExploits98References244
CNVD
CNVD
•added 2021/04/20 12:00 a.m.•40 views

GPAC buffer overflow vulnerability (CNVD-2021-30173)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A buffer overflow vulnerability exists in the tencboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or execut...

7.8CVSS7.8AI score0.01465EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/04/20 12:00 a.m.•46 views

GPAC memory leak vulnerability (CNVD-2021-30174)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the stblGetSampleInfos function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

5.5CVSS6.4AI score0.01061EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/19 7:15 p.m.•31 views

CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

7.8CVSS0.01472EPSS
SaveExploits1References2
NVD
NVD
•added 2021/04/19 7:15 p.m.•30 views

CVE-2021-31257

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS0.00872EPSS
SaveExploits1References2
OSV
OSV
•added 2021/04/19 7:15 p.m.•26 views

CVE-2021-31257

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

5.5CVSS6.6AI score
SaveExploits0References2
OSV
OSV
•added 2021/04/19 7:15 p.m.•25 views

CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

5.5CVSS6.5AI score
SaveExploits0References2
OSV
OSV
•added 2021/04/19 7:15 p.m.•6 views

DEBIAN-CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

5.5CVSS6.5AI score0.01061EPSS
SaveExploits1References1
Rows per page
Query Builder