GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. vwidboxdel function in boxcodebase.c in GPAC 20200801 and earlier versions is vulnerable to null pointer dereference. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2020-19750

An issue was discovered in gpac 0.8.0. The strdup function in boxcodebase.c has a heap-based buffer over-read...

DEBIAN-CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...

DEBIAN-CVE-2019-20171

An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...

GPAC memory leak vulnerability (CNVD-2020-03951)

GPAC is an open source multimedia framework. A memory leak vulnerability exists in the dinfNew of the isomedia/boxcodebase.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. No detailed vulnerability details are provided at this time...

DEBIAN-CVE-2018-21016

audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...