CVE-2019-20628

GPAC before 0.8.0 (libgpac.a) contains a Use-After-Free in gf_m2ts_process_pmt (media_tools/mpegts.c) that can cause a denial of service via a crafted MP4 file. Affected component is demonstrated by MP4Box; no patch/version details are provided in the referenced documents.

CVE-2019-20629

GPAC prior to 0.8.0 contains a heap-based buffer over-read in gf_m2ts_process_pmt (media_tools/mpegts.c) within libgpac.a, exploitable via crafted MP4 files to cause a denial of service. This affects GPAC/MP4Box builds using the libgpac.a component. Remediation: upgrade GPAC to version 0.8.0 or l...

CVE-2019-20630

GPAC before version 0.8.0 (libgpac.a) is affected by CVE-2019-20630 due to a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) within utils/bitstream.c. This can lead to denial of service when processing a crafted MP4 file. Multiple connected sources confirm the same issue a...

CVE-2019-20631

CVE-2019-20631 refers to a vulnerability in GPAC’s libgpac.a prior to 0.8.0, where an invalid pointer dereference in gf_list_count (utils/list.c) can cause a denial of service when processing a crafted MP4 file. Supported by multiple sources (NVD/NASL/RH OSV entries) and linked to MP4Box, the iss...

CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20632

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gfodfdeletedescriptor in odf/descprivate.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20632

GPAC libgpac.a (GPAC) before 0.8.0 contains an invalid pointer dereference in gf_odf_delete_descriptor (odf/desc_private.c) that can cause denial of service when processing a crafted MP4 file. This affects MP4Box as demonstrated in GPAC, with CVE-2019-20632 reported across multiple sources (RH, N...

CVE-2019-20632

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gfodfdeletedescriptor in odf/descprivate.c that can cause a denial of service via a crafted MP4 file...

Updated gpac packages fix security vulnerabilities

The updated packages fix security vulnerabilities: AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg...

MGASA-2020-0137 Updated gpac packages fix security vulnerabilities

The updated packages fix security vulnerabilities: AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg...

Debian: Security Advisory (DLA-2072-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2072-1 : gpac security update

Multiple issues were found in gpac, a multimedia framework featuring the MP4Box muxer. CVE-2018-21015 AVCDuplicateConfig at isomedia/avcext.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. CVE-2018-21016 audiosampleentryAddB...

[SECURITY] [DLA 2072-1] gpac security update

Package : gpac Version : 0.5.0+svn5324dfsg1-1+deb8u5 CVE ID : CVE-2018-21015 CVE-2018-21016 CVE-2019-13618 CVE-2019-20161 CVE-2019-20162 CVE-2019-20163 CVE-2019-20165 CVE-2019-20170 CVE-2019-20171 CVE-2019-20208 Debian Bug : 940882 932242 Multiple issues were found in gpac, a multimedia framework...

DLA-2072-1 gpac - security update

Bulletin has no description...

CVE-2020-6630

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfisomgetmediadatasize in isomedia/isomread.c...

DEBIAN-CVE-2020-6631

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfm2tsstreamprocesspmt in mediatools/m2tsmux.c...

CVE-2020-6630

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfisomgetmediadatasize in isomedia/isomread.c...

CVE-2020-6631

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfm2tsstreamprocesspmt in mediatools/m2tsmux.c...

CVE-2020-6631

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfm2tsstreamprocesspmt in mediatools/m2tsmux.c...