CVE-2024-24267

CVE-2024-24267 affects gpac v2.2.1 , with a memory leak in the gfio_blob variable inside the function gf_fileio_from_blob . Root cause: memory not released, leading to potential resource exhaustion. The issue is mitigated by upgrading to gpac v2.4.0 (fixed). Exploitation details are not provided ...

CVE-2024-24266

CVE-2024-24266 affects gpac v2.2.1 with a Use-After-Free (UAF) in dasher_configure_pid (src/filters/dasher.c). Multiple sources (NVD, Red Hat, OSV, CVE lists) confirm the vulnerability in gpac 2.2.1 and attribute it to dasher.c. CVSS v3.1 base score 7.5 (High) with NETWORK attack vector, LOW atta...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24267

gpac v2.2.1 fixed in v2.4.0 was discovered to contain a memory leak via the gfioblob variable in the gffileiofromblob function...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

DEBIAN-CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

Buffer overflow

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gfisomnewgenericsampledescription function in the isomedia/isomwrite.c:4577...

PT-2024-19550 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3 Description: A buffer overflow issue was detected in GPAC via the gf isom new generic sample description function in the isomedia/isom write.c file at line 4577. This issue can be exploited, potentially leading to security...

CVE-2024-22749

GPAC v2.3 is affected by a buffer overflow in the isomedia/isom_write.c:4577 path via gf_isom_new_generic_sample_description. The CVE entry describes a local impact with high severity (CVSS 3.1: HIGH). Public references in the connected documents confirm the presence of the vulnerability in GPAC ...

GPAC Denial of Service Vulnerability (CNVD-2024-06174)

GPAC is an open source multimedia framework. A denial of service vulnerability exists in GPAC version 2.3-DEV, which originates from an infinite loop in function av1uvlc in mediatools/avparsers.c. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2023-50120

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1uvlc at mediatools/avparsers.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2023-50120

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1uvlc at mediatools/avparsers.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

Design/Logic Flaw

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1uvlc at mediatools/avparsers.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A denial of service vulnerability exists in GPAC version 2.3-DEV, which originates from an infinite loop in function av1uvlc in mediatools/avparsers.c. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2023-50120

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1uvlc at mediatools/avparsers.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...