EUVD-2020-15437

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-20160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in...

Linux Distros Unpatched Vulnerability : CVE-2020-35979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-23269

An issue was discovered in gpac 0.8.0. The stblGetSampleSize function in isomedia/stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted media file...

CVE-2020-22673

Memory leak in the sencParse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-25427

A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gfisomgettrackid function, which causes a denial of service...

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

Heap overflow

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

Design/Logic Flaw

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...

UBUNTU-CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22673

GPAC MP4Box 0.8.0 is affected by CVE-2020-22673 due to a memory leak in the senc_Parse function, which can allow an attacker to trigger a denial of service via crafted input. Impact is a DoS with partial availability impact per CVSS. No exploit details are provided beyond the CVE entry; remediati...

CVE-2020-22674

GPAC vulnerability CVE-2020-22674 affects gpac 0.8.0. An invalid memory dereference in FixTrackID (isom_intern.c) allows DoS via crafted input. Affected component is the GPAC MPEG-4 Systems implementation; impact is denial of service with potential crash. Remediation: upgrade to a newer GPAC rele...

CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...