Heap Buffer Overflow

libgpac.so is vulnerable to heap-based buffer overflow. The vulnerability exists in multiple functions of boxdump.c which allows an attacker to send crafted file in to the system causing an application crash...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...

CVE-2021-32269

CVE-2021-32269 affects gpac (up to 20200801). A NULL pointer dereference in ilst_item_box_dump (box_dump.c) can cause Denial of Service. The provided documents do not specify exploit details or a fixed patch/version; no remediation is stated. Monitor for updates.

gpac 代码问题漏洞

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the ilstitemboxdump function in boxdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

Null pointer dereference

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomdump in isomedia/boxdump.c...

Debian DLA-1432-1 : gpac security update

Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read. CVE-2018-13006 Due to an error in a strlen call, there is a heap-based buffer over-read in the...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13006

CVE-2018-13006 is a GPAC/MP4Box vulnerability. The Debian DLA-1432-1 advisory reports two heap-based buffer over-reads in gpac: (1) CVE-2018-13005 in isomedia/box_code_base.c urn_Read (heap over-read due to a faulty while-loop condition) and (2) CVE-2018-13006 in isomedia/box_dump.c hdlr_dump (he...