5723 matches found
CVE-2022-45283
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...
CVE-2022-45283
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...
CVE-2022-45283
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...
CVE-2022-45283
GPAC MP4box v2.0.0 is affected by CVE-2022-45283 due to a stack overflow in the smil_parse_time_list function at /scenegraph/svg_attributes.c. The CVE entry notes high impact with local attack vector and required user interaction. Connected sources corroborate the vulnerability in GPAC and list D...
CVE-2022-45283
Removed by vendor...
PT-2022-27458 · Unknown · Gpac Mp4Box
Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.0.0 Description: A stack overflow issue was found in the smil parse time list parameter at /scenegraph/svg attributes.c. Recommendations: For GPAC MP4box version 2.0.0, consider restricting access to the vulnerable smil...
GPAC memory leak vulnerability
GPAC is an open source multimedia framework. GPAC version v2.1-DEV-rev428-gcb8ae46c8-master is vulnerable to a memory leak that originates from a failure or inability to free dynamically allocated heap memory in the dimCboxread function of isometria/boxcode3gpp.c. An attacker could exploit the...
GPAC Memory Misreference Vulnerability
GPAC is an open source multimedia framework. GPAC version v2.1-DEV-rev478-g696e6f868-master is vulnerable to a memory misquoting vulnerability that stems from a confusion in the QIsTypeOn function in /gpac/src/bifs/unquantize.c responsible for freeing memory. An attacker could exploit this...
DEBIAN-CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
Heap overflow
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
UBUNTU-CVE-2022-45343
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the QIsTypeOn function at /gpac/src/bifs/unquantize.c...
CVE-2022-4202
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
DEBIAN-CVE-2022-4202
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
Integer overflow
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2022-4202
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...
UBUNTU-CVE-2022-4202
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsrdec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclose...