The vulnerability of the gf_m2ts_process_sdt() function on the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfm2tsprocesssdt function on the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the multimedia platform GPAC, related to writing beyond memory boundaries, allows attackers to cause service failures.

The vulnerability of the multimedia platform GPAC is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the gf_avc_change_vui() function on the GPAC multimedia platform allows a perpetrator to trigger a service failure.

The vulnerability of the gfavcchangevui function on the GPAC multimedia platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

GLSA-202408-21 : GPAC: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-21 GPAC: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GPAC. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...

GPAC: Multiple Vulnerabilities

Background GPAC is an implementation of the MPEG-4 Systems standard developed from scratch in ANSI C. Description Multiple vulnerabilities have been discovered in GPAC. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

ROS-20240808-01

A vulnerability in the gfm2tsprocesssdt function of the GPAC multimedia platform is related to a buffer overflow in the heap. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the gffwrite component of the GPAC Multimedia Platform is...

ROS-20240807-06

Vulnerability in the gfavcchangevui function of the GPAC multimedia platform, related to the failure to take measures to to protect the structure of the web page. Exploitation of the vulnerability could allow an attacker to cause a denial of denial of service Vulnerability in the av1uvlc function...

Use After Free

GPAC is vulnerable to Use After Free. The vulnerability is caused by not properly freeing memory for prevl and its components before removing it from the list in the xmtnodeend function, leading to a use after free condition...

NULL Pointer Dereference

GPAC is vulnerable to NULL Pointer Dereference. The vulnerability is caused due to the lack of a null pointer check for pck-stream in the m2tsdmxonevent function, leading to a null pointer dereference...

Infinite Loop

GPAC is vulnerable to an Infinite Loop. The vulnerability is due to an infinite loop caused by the function isoffinprocess in the file src/filters/isoffinread.c. An attacker can cause the application to enter an infinite loop by manipulating the input data, which could lead to a Denial of Service...

CVE-2024-6063

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...

DEBIAN-CVE-2024-6063

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...

CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

UBUNTU-CVE-2024-6063

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...

CVE-2024-6063

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects the function m2tsdmxonevent of the file src/filters/dmxm2ts.c of the component MP4Box. The manipulation leads to null pointer dereference. An attack has to be approached locally...

UBUNTU-CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

CVE-2024-6064 GPAC MP4Box loader_xmt.c xmt_node_end use after free

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

CVE-2024-6064

CVE-2024-6064 affects GPAC 2.5-DEV-rev228-g11067ea92-master, specifically the MP4Box loader_xmt.c function xmt_node_end . The vulnerability is a use-after-free caused by the described manipulation, requiring local access . Public exploit information and a patch reference are provided: patch ident...

CVE-2024-6064 GPAC MP4Box loader_xmt.c xmt_node_end use after free

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...