PT-2026-111686

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf m2ts decode ait of the file src/media tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to th...

UBUNTU-CVE-2023-1448

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gfm2tsprocesssdt of the file mediatools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been...

GPAC media_tools/mpegts gf_m2ts_section_complete Heap Buffer Overflow DoS

The vulnerability of the gfm2tssectioncomplete function in the mediatools/mpegts component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MP4 file...

PT-2021-6584

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description The issue is related to a heap-based buffer overflow in the gf m2ts section complete function in media tools/mpegts.c, which can cause a denial of service DOS via a crafted MP4 file. This can be exploited by a...

GPAC Null Pointer Dereference Vulnerability (CNVD-2020-12682)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfm2tsstreamprocesspmt function in mediatools/m2tsmux.c in GPAC 0.8.0. An attacker could exploit this vulnerability to cause a denial of service...

PT-2020-19196

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description An issue was discovered in the function gf m2ts stream process pmt in media tools/m2ts mux.c, which leads to a NULL pointer dereference. Recommendations For GPAC version 0.8.0, at the moment, there is no...

UBUNTU-CVE-2019-13618

In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c...

PT-2020-10605

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the gf m2ts process pmt function in media tools/mpegts.c, which can cause a denial of service when processing a crafted MP4 file. Recommendations For versio...

PT-2019-6174

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description The issue is related to an invalid memory read in the gf m2ts process pmt function within the media tools/mpegts.c component of the GPAC multimedia platform. This can cause a denial of service when a...