CVE-2021-21948

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2021-21948: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the readDatHeadVec functionality of AnyCubic Chitubox AnyCubic Plugin 1.0.0. A specially-crafted GF file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

The vulnerability of the gf_dashSegmenter_probe_input function in the MP4Box module of the GPAC multimedia platform allows a intruder to cause a service failure.

The vulnerability of the gfdashsegmenterprobeinput function in the MP4Box component of the GPAC multimedia platform is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

DEBIAN-CVE-2022-27147

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gfnodegetattributebytag...

The vulnerability of the gf_media_export Filters function in the MP4Box command of the GPAC multimedia platform, which allows a violator to cause a service failure.

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the gf_m2ts_section_complete function in the media_tools/mpegts component of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfm2tssectioncomplete function in the mediatools/mpegts component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MP4 file...

PT-2022-16728 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a NULL pointer dereference in the gf dump vrml field.isra function. Recommendations: For GPAC version 1.0.1, at the moment, there is no information about a newer version that contains a...

PT-2022-18146 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.0 Description: The issue is a heap-based buffer overflow in the gf base64 encode function. It can be triggered via MP4Box. Recommendations: For GPAC version 2.0, at the moment, there is no information about a newer version that...

CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12615

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description The issue is related to an invalid free vulnerability in the binary MP4Box, which can lead to a Denial of Service DoS. This vulnerability occurs via the function gf free at utils/alloc.c. Recommendations For GPAC...

PT-2022-12633

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg destroy routes at scenegraph/vrml route.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12616

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf dump vrml sffield at scene manager/scene dump.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, consider disabling t...

PT-2022-12613

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description An untrusted pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12612

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg vrml field pointer del at scenegraph/vrml tools.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, consider...

PT-2022-12611

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12614

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description The issue is related to a stack overflow via the function gf node get name at scenegraph/base scenegraph.c. This can lead to a program crash, causing a Denial of Service DoS. Recommendations For GPAC version 1.1....

CVE-2021-45763

GPAC v1.1.0 was discovered to contain an invalid call in the function gfnodechanged. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-45760

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

PT-2022-11266 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the gf text get utf8 line function in load text.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution...