CVE-2021-30019

In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

CVE-2021-30015

There is a Null Pointer Dereference in function filtercore/filterpck.c:gffilterpcknewallocinternal in GPAC 1.0.1. The pid comes from function av1dmxparseflushsample, the ctx.opid maybe NULL. The result is a crash in gffilterpcknewallocinternal...

CVE-2021-30019

GPAC 1.0.1 contains a heap overflow in the adts_dmx_process function (filters/reframe_adts.c) when a crafted ADTS file makes ctx->hdr.frame_size smaller than ctx->hdr.hdr_size, causing a negative size in memcpy. This is a confirmed vulnerability (CVE-2021-30019) with a documented impact on ...

CVE-2021-29279

GPAC 1.0.1 contains an integer overflow in filter_core/filter_props.c:gf_props_assign_value. When processing a GF_PropertyValue value, value->value.data.size may be negative, causing memcpy in gf_props_assign_value to fail. This CVE (CVE-2021-29279) is documented across multiple sources (NVD e...

CVE-2021-30015

Summary: CVE-2021-30015 affects GPAC 1.0.1 and is a null pointer dereference in filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal, where the pid comes from av1dmx_parse_flush_sample and ctx.opid may be NULL, causing a crash. Affected software: GPAC 1.0.1 (as referenced in NVD and CNVD OSV...

CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

CVE-2021-30022

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

CVE-2021-30020

GPAC 1.0.1 contains a heap overflow in gf_hevc_read_pps_bs_internal (media_tools/av_parsers.c) where a crafted file may cause pps->num_tile_columns to exceed the size of pps->column_width, leading to a heap overflow. Multiple sources corroborate this CVE-2021-30020 vulnerability (NVD, CNVD/...

CVE-2021-30022

GPAC vulnerability CVE-2021-30022 stems from an integer overflow in media_tools/av_parsers.c (gf_avc_read_pps_bs_internal). Affected GPAC versions range from 0.5.2 to 1.0.1; pps_id may be negative, while avc->pps has 255 units, causing a crash. Public disclosures in NVD/CNVD/OSV/NASL variants ...

CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

CVE-2021-30199

CVE-2021-30199 affects GPAC 1.0.1: a Null Pointer Dereference in filters/reframe_latm.c when gf_filter_pck_get_data is called; the first argument pck may be NULL with a crafted MP4, leading to a crash. Public records corroborate this vulnerability in GPAC. No explicit exploit details are provided...

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

CVE-2021-30014

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

CVE-2021-29279

There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...

CVE-2021-30022

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

CVE-2021-30014

GPAC contains an integer overflow in media_tools/av_parsers.c (hevc_parse_slice_segment) affecting v0.9.0-preview through 1.0.1, leading to a crash. The issue is described across CVE-2021-30014 and CNVD-2021-30183; multiple sources corroborate the overflow in GPAC’s av_parsers.c. Severity metrics...

CVE-2021-30019

In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

CVE-2021-30015

There is a Null Pointer Dereference in function filtercore/filterpck.c:gffilterpcknewallocinternal in GPAC 1.0.1. The pid comes from function av1dmxparseflushsample, the ctx.opid maybe NULL. The result is a crash in gffilterpcknewallocinternal...