5718 matches found
CVE-2022-47653
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3updatechannels function of mediatools/avparsers.c:9113...
CVE-2022-47088
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...
CVE-2022-47661
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...
CVE-2022-47095
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevcparsevpsextension function of mediatools/avparsers.c...
CVE-2022-47659
GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to a Buffer Overflow in gf_bs_read_data (CVE-2022-47659). The issue can lead to Denial of Service or potentially arbitrary code execution. Affected product is GPAC MP4box; impact is local, requires user interaction per CVSS data. Debian advisori...
GPAC MP4Box 输入验证错误漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. An input validation error vulnerability exists in GPAC MP4Box version 2.1-DEV-rev574-g9d5bb184b, which...
CVE-2022-47087
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67, which stems from a...
CVE-2022-47657
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by CVE-2022-47657 due to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c:7662). The connected advisories indicate vendor-specific fixes: Debian's DSA-5411-1 patching to gpac 1.0.1+dfsg1-4+deb11u2, Gentoo GLSA-202408-21 reco...
CVE-2022-47093
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...
GPAC MP4Box 资源管理错误漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A resource management error vulnerability exists in GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b,...
CVE-2022-47093
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is affected by a heap use-after-free in filters/dmx_m2ts.c:470 (m2tsdmx_declare_pid). The CVE-2022-47093 entry documents a high-severity impact (Confidentiality, Integrity, Availability: HIGH; Local access, user interaction required) and indicates the vulnera...
CVE-2022-47088
GPAC MP4Box 2.1-DEV-rev574-g9d5bb184b is vulnerable to a Buffer Overflow. The issue affects GPAC’s MP4Box component and is tracked as CVE-2022-47088 with a high impact (CONF/I/AV(H) = High) and local access required. Mitigation from Gentoo advisory GLSA-202408-21 recommends upgrading to GPAC 2.2....
CVE-2022-47653
GPAC MP4Box 2.1-DEV-rev593-g007bf61a0 is affected by a Buffer Overflow in eac3_update_channels (media_tools/av_parsers.c:9113). Root cause: overflow in eac3_update_channels function. Impact: High on confidentiality, integrity, and availability; attack vector LOCAL with LOW complexity and NO privi...
CVE-2022-47657
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevcparsevpsextension of mediatools/avparsers.c:7662...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev644-g5c4df2a67, which stems from a...
CVE-2022-47091
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...
CVE-2022-46489
GPAC 2.1-DEV-rev505-gb9577e6ad-master contains a memory leak in gf_isom_box_parse_ex (box_funcs.c). The issue is documented across multiple sources (NVD/OSV/etc.) with no explicit exploit details provided in the connected documents. The available sources do not specify a confirmed active exploit ...
