GPAC Code Issue Vulnerability (CNVD-2021-103390)

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from an error in the processing logic of the product's gfgetbitsize function. An attacker could cause a denial of service through this vulnerability...

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

UBUNTU-CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

GPAC null pointer dereference vulnerability (CNVD-2022-03624)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03623)

GPAC is an open source multimedia framework. gfdumpvrmldynfield.isra function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-37706 Potential integer underflow upon receiving STUN message in PJSIP

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

GPAC infinite loop vulnerability

GPAC is an open source multimedia framework. gflog function in GPAC version 1.1.0 has an infinite loop vulnerability that can be exploited by attackers to cause a denial of service...

GPAC null pointer dereference vulnerability (CNVD-2022-03620)

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03618)

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03616)

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-43804

CVE-2021-43804 affects the PJPROJECT/PJSIP stack, specifically PJMEDIA/RTCP. The flaw arises when an incoming RTCP BYE message declares a reason length that isn’t checked against the actual packet size, enabling an out-of-bounds read. The documents consistently describe this as the root cause and...

CVE-2021-43804 Out-of-bounds read when parsing RTCP BYE message in PJSIP

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-37706

CVE-2021-37706 affects the pjproject/PJSIP stack embedded in various products. If an incoming STUN message contains an ERROR-CODE attribute, the code path does not check the header length before a subtraction, enabling an integer underflow that could let a malicious actor remotely execute code vi...

GPAC Denial of Service Vulnerability (CNVD-2022-03627)

GPAC is an open source multimedia framework. gfdumpsetup function in GPAC version 1.0.1 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of a specially crafted MP4Box command...