CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22678

GPAC CVE-2020-22678 affects gpac 0.8.0. The vulnerability is a heap-based buffer overflow in the gf_media_nalu_remove_emulation_bytes function (av_parsers.c) that can trigger a denial of service via crafted input. Connected sources corroborate the same issue across multiple advisories; no explici...

CVE-2020-22679

GPAC MP4Box (gpac 0.8.0) has a memory leak in sgpd_parse_entry that can cause DoS via a crafted input (CVE-2020-22679). The issue is documented across multiple sources; exploitation status is not provided in the supplied documents. Remediation: upgrade GPAC to a newer version; GLSA-202408-21 reco...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

gpac MP4Box安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer error vulnerability that stems from an issue discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of...

gpac MP4Box安全漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer overflow vulnerability that stems from an issue discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of service DOS via crafte...

Gpac MP4Box 缓冲区错误漏洞

MP4Box is a multimedia packager available in GPAC. A stack buffer overflow vulnerability exists in the nhmldmxsendsample function in src/filters/dmxnhml.c:1004 in MP4Box version 1.0.1. An attacker can exploit this vulnerability to cause a denial of service via the szXmlTo parameter...

Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to handle ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box 1.1.0 suffers from a buffer overflow vulnerability that can be exploited by attackers to...

Gpac MP4Box 缓冲区错误漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a buffer overflow vulnerability, which can be exploited by attackers to crash...

Denial Of Service(DoS)

ccextractor:sid is vulnerable to denial of service. An issue was discovered in GPAC is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

Denial Of Service (DoS)

gpac is vulnerable to denial of service. The vulnerability exists due a NULL pointer dereference in the function vwidboxdel located in boxcodebase.c...

Denial Of Service (DoS)

ccextractor is vulnerable to denial of service. The vulnerability exists due a NULL pointer dereference in MediaRewriteODFrame function in GPAC...

Updated gpac packages fix security vulnerability

A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...

MGASA-2021-0431 Updated gpac packages fix security vulnerability

A specially crafted MPEG-4 input when decoding the atom for the "co64" FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. CVE-2021-21834 A specially crafted MPEG-4 input using the "ctts" FOURCC code can cause a...

GPAC null pointer dereference vulnerability (CNVD-2021-82975)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a null pointer dereference vulnerability exists in the ilstitemboxdump function in boxdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to cause a denial of service...

GPAC Stack Buffer Overflow Vulnerability (CNVD-2021-82977)

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...