CVE-2020-35980

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

CVE-2020-35980

GPAC, versions 0.8.0 and 1.0.1, is affected by CVE-2020-35980 due to a use-after-free in gf_isom_box_del() (isomedia/box_funcs.c). Connected sources confirm this CVE and specify the underlying fault in the box deletion path. The Debian advisory notes multiple vulnerabilities in GPAC and provides ...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the gfhintertrackfinalize function in mediatools/isomhinter.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the dumpisomsdp function in filedump.c in versions of GPAC prior to 1.0.1. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-11891 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which is a use-after-free. Recommendations: For GPAC version 0.8.0, update to a version that fixes the...

CVE-2020-35980

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An invalid pointer dereference vulnerability exists in the SetupWriters function in isomedia/isomstore.c in GPAC versions 0.8.0 and 1.0.1. No detailed vulnerability details are provided at this time...

GPAC integer overflow vulnerability (CNVD-2021-30183)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in the hevcparseslicesegment function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability to cause a program crash...

GPAC memory leak vulnerability (CNVD-2021-30180)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC Heap Overflow Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a...

GPAC memory leak vulnerability (CNVD-2021-30174)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the stblGetSampleInfos function in MP4Box in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30176)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the HintFile function in GPAC version 1.0.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of service...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30179)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function in GPAC version 1.0.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

GPAC buffer overflow vulnerability (CNVD-2021-30173)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A buffer overflow vulnerability exists in the tencboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or execut...

GPAC heap overflow vulnerability (CNVD-2021-30184)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30182)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the filtercore/filterpck.c:gffilterpcknewallocinternal function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

GPAC buffer overflow vulnerability (CNVD-2021-30175)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A buffer overflow vulnerability exists in the abstboxread function in MP4Box in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service or execut...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30178)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfisomcencgetdefaultinfointernal function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial ...

GPAC Integer Overflow Vulnerability

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in gfavcreadppsbsinternal in mediatools/avparsers.c in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30187)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in GPAC version 1.0.1 in filters/reframelatm.c when calling gffilterpckgetdata. An attacker could exploit this vulnerability via a specially crafted mp4 file to...