CVE-2021-31257

The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31255

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31254

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31259

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31260

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31258

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31256

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31262

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31258

CVE-2021-31258 affects GPAC 1.0.1: the function gf_isom_set_extraction_slc can trigger a NULL pointer dereference when processing a crafted MP4Box file, leading to denial of service. Exploitation details are not provided in the available documents. Remediation visible in Gentoo GLSA 2024-08-21 re...

PT-2021-19226

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the MergeTrack function. Recommendations For...

PT-2021-19220

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the tenc box read function in MP4Box, allowing attackers to potentially cause a denial of service or execute arbitrary code via a crafted file. This issue is related to invalid I...

PT-2021-19222

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A memory leak in the stbl GetSampleInfos function in MP4Box allows attackers to read memory via a crafted file. Recommendations For GPAC version 1.0.1, at the moment, there is no information about a newer version...

PT-2021-19221

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A buffer overflow issue exists in the abst box read function within MP4Box in GPAC, allowing attackers to potentially cause a denial of service or execute arbitrary code by using a crafted file. No information is...

PT-2021-19227

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to read memory via a crafted file in the MP4Box command, specifically through the gf hinter track new function. Recommendations For GPAC version 1.0.1, consider restricting the use of t...

PT-2021-19228

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the AV1 DuplicateConfig function...

PT-2021-19223

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is related to the HintFile function. Recommendations For GPA...

CVE-2021-31255: Buffer Copy without Checking Size of Input

Buffer overflow in the abstboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-31259: NULL Pointer Dereference

The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31256: Missing Release of Memory after Effective Lifetime

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...