CVE-2021-31254

Removed by vendor...

CVE-2021-31255

CVE-2021-31255 concerns GPAC, specifically a buffer overflow in the abst_box_read function of MP4Box in GPAC 1.0.1. The vulnerability can lead to denial of service or arbitrary code execution via a crafted MP4 file. Several connected sources corroborate this issue across multiple databases and ad...

CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31256

CVE-2021-31256 affects GPAC 1.0.1’s MP4Box via a memory leak in stbl_GetSampleInfos that allows memory reads from a crafted file. Affected software/version: GPAC 1.0.1. Underlying cause: memory leak in stbl_GetSampleInfos. Impact: information disclosure via crafted input. Mitigation: upgrade to G...

CVE-2021-31261

CVE-2021-31261 affects GPAC 1.0.1; the gf_hinter_track_new path allows memory read via a crafted MP4Box input. The impact is information disclosure (read memory) with local access and, per sources, user interaction may be required. Mitigation: upgrade GPAC to a newer release (Gentoo GLSA 202408-2...

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31262

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31262

Removed by vendor...

CVE-2021-31259

Removed by vendor...

CVE-2021-31255

Removed by vendor...

CVE-2021-31257

Removed by vendor...

CVE-2021-31256

Removed by vendor...

CVE-2021-31262: NULL Pointer Dereference

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31258: NULL Pointer Dereference

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31259: NULL Pointer Dereference

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31260: NULL Pointer Dereference

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31257: NULL Pointer Dereference

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31261: Improper Restriction of Operations within the Bounds of a Memory Buffer

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31256: Missing Release of Memory after Effective Lifetime

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31254: Out-of-bounds Write

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...