PT-2021-18570

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is a Null Pointer Dereference in the gf filter pck new alloc internal function, located in filter core/filter pck.c. This occurs because the ctx.opid may be NULL, causing a crash. The pid is derived fro...

PT-2021-18573

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue arises in the gf hevc read pps bs internal function, located in media tools/av parsers.c. A crafted file can cause pps-num tile columns to be larger than sizeofpps-column width, resulting in a heap...

PT-2021-18159

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to an integer overflow in the gf props assign value function, located in filter core/filter props.c. This overflow occurs when the value-value.data.size is a negative number, causing the...

PT-2021-19225

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom cenc get default info...

PT-2021-19224

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom set extraction slc...

PT-2021-18661

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a Null Pointer Dereference in the gf filter pck get data function, which can be triggered by a crafted mp4 file. This results in a crash when the first argument pck is null. Recommendation...

CVE-2020-27850

A stored Cross-Site Scripting XSS vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of a GF form. This code is interpreted by users in a privileged role Administrator, Editor, etc...

Garud - An Automation Tool That Scans Sub-Domains, Sub-Domain Takeover And Then Filters Out XSS, SSTI, SSRF And More Injection Point Parameters

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters. Requirements: Go Language, Python 2.7 or Python 3. System requirements: Recommended to run on vps with 1VCPU and 2GB ram. Tools used - You must need to install...

UBUNTU-CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...

PT-2020-12692

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description An issue in libgpac.a, as demonstrated by MP4Box, leads to improper decision-making in audio sample entry Read in isomedia/box code base.c regarding gf isom box del calls. This results in use-after-free outcomes...

GPAC Invalid Pointer Dereference Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in gfodfdeletedescriptor in odf/descprivate.c in libgpac.a in versions prior to GPAC 0.8.0. An attacker can exploit this vulnerability to cause a denial of...

GPAC Invalid Pointer Dereference Vulnerability (CNVD-2020-19877)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in gflistcount in utils/list.c in libgpac.a in versions of GPAC prior to 0.8.0. An attacker can exploit this vulnerability to cause a denial of service via a...

DEBIAN-CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

UBUNTU-CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

GPAC Null Pointer Dereference Vulnerability (CNVD-2020-12682)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfm2tsstreamprocesspmt function in mediatools/m2tsmux.c in GPAC 0.8.0. An attacker could exploit this vulnerability to cause a denial of service...

PT-2020-19196

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description An issue was discovered in the function gf m2ts stream process pmt in media tools/m2ts mux.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, at the moment, there is no...

PT-2020-19195

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description A NULL pointer dereference issue was found in the gf isom get media data size function, located in the isomedia/isom read.c file. Recommendations For GPAC version 0.8.0, consider avoiding the use of the gf isom g...

GPAC Code Issue Vulnerability

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfodfavccfgwritebs' function in the odf/descriptors.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for ...

PT-2019-16111

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom dump in isomedia/box dump.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, update to a...

PT-2019-16109

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which results in a NULL pointer dereference. Recommendations For GPAC version 0.8.0, there is n...