CVE-2021-46313

GPAC’s MP4Box (v1.0.1) contains a segmentation fault in __memmove_avx_unaligned_erms that can lead to a DoS. Multiple sources (NVD entry CVE-2021-46313; CNVD/OSV/Nessus/Gentoo GLSA references) corroborate the vulnerability. remediation guidance in Gentoo GLSA 202408-21 recommends upgrading GPAC t...

CVE-2021-46313

The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46311

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgdestroyroutes at scenegraph/vrmlroute.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46311

CVE-2021-46311 describes a NULL pointer dereference in GPAC v1.1.0, triggered by gf_sg_destroy_routes() in scenegraph/vrml_route.c, leading to a Denial of Service (DoS). The vulnerability is supported by both NVD and OSV entries with identical technical wording. No concrete remediation or patch d...

CVE-2021-46311

Removed by vendor...

CVE-2021-46240

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfdumpvrmlsffield at scenemanager/scenedump.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46240

Removed by vendor...

CVE-2021-46240

GPAC v1.1.0 has a NULL pointer dereference in gf_dump_vrml_sffield() (scene_manager/scene_dump.c) leading to Denial of Service. Public sources in connected documents identify this as a GPAC vulnerability with no details on an official patch in the Initial CVE entry, but a Gentoo GLSA 2024-08-21 r...

CVE-2021-46239

The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46239

GPAC MP4Box (GPAC v1.1.0) contains an invalid free vulnerability in gf_free() in utils/alloc.c that can lead to a Denial of Service (CVE-2021-46239). Multiple sources confirm the issue affects GPAC v1.1.0 and describe the DoS impact. Remediation available in upstream Gentoo advisory: upgrade to G...

CVE-2021-46239

Removed by vendor...

CVE-2021-46238

Removed by vendor...

CVE-2021-46238

GPAC v1.1.0 was discovered to contain a stack overflow via the function gfnodegetname at scenegraph/basescenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service DoS...

CVE-2021-46238

GPAC v1.1.0 contains a stack overflow in gf_node_get_name() at scenegraph/base_scenegraph.c, leading to a DoS through a program crash. The issue is publicly documented across multiple sources, e.g., NVD entry CVE-2021-46238 with the same root cause. Connected advisories corroborate the impact and...

CVE-2021-46237

Removed by vendor...

CVE-2021-46237

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46237

GPAC vulnerability CVE-2021-46237 involves an untrusted pointer dereference in gf_node_unregister() at scenegraph/base_scenegraph.c, leading to a Denial of Service. Affected software is GPAC v1.1.0; the root cause is a pointer dereference in the scenegraph module. Impact, per sources, is DoS with...

CVE-2021-46236

A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfsgvrmlfieldpointerdel at scenegraph/vrmltools.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46236

Removed by vendor...

CVE-2021-46236

GPAC v1.1.0 is affected by CVE-2021-46236 due to a NULL pointer dereference in gf_sg_vrml_field_pointer_del() (scenegraph/vrml_tools.c), enabling a Denial of Service. Public sources consistently describe the vulnerability as DoS without indicating exploitable specifics. Remediation evidence from ...