5724 matches found
CVE-2021-40571
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilstboxread function in boxcodeapple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...
GPAC 资源管理错误漏洞
GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC, which stems from the gflistdel function in the product list.c file releasing memory multiple times. An attacker could cause a denial of service via this vulnerability...
CVE-2021-40576
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gfisomgetpaytcount function in hinttrack.c, which allows attackers to cause a denial of service...
CVE-2021-40575
GPAC 1.0.1’s MP4Box mpgviddmx_process null pointer dereference leads to DoS. CVE-2021-40575 is associated with this issue; Debian notes a fix in gpac 1.0.1+dfsg1-4+deb11u2 (Bullseye). If using affected GPAC packages, upgrade to the patched version to mitigate. The Initial description confirms the...
CVE-2021-40570
GPAC vulnerability CVE-2021-40570 affects the MP4Box binary in GPAC 1.0.1, where a double-free in avc_compute_poc (av_parsers.c) can lead to denial of service and may allow code execution with privilege escalation. Public sources confirm the issue and its impact; Debian advisory notes fixed versi...
CVE-2021-40569
The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...
CVE-2021-40569
GPAC's GPAC mp4box binary (up to 1.0.1) contains a double-free vulnerability in iloc_entry_del within box_code_meta.c, enabling denial of service. The issue is corroborated by multiple sources (e.g., Debian DSA-5411-1), which notes exploitation potential and provides a patched Debian fix: gpac ve...
CVE-2021-40572
GPAC CVE-2021-40572 affects the MP4Box component in GPAC 1.0.1, with a double-free bug in av1dmx_finalize (reframe_av1.c) that can cause denial of service. Public details describe the vulnerability and some patch guidance: Debian reports fixes in GPAC 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA recommends...
CVE-2021-40568
GPAC (mediaplayer framework) is affected by CVE-2021-40568 due to a buffer overflow in the svc_parse_slice function in av_parsers.c, exploitable via a malformed MP4 file. Affected versions include GPAC up to 1.0.1; impact includes denial of service, with potential code execution and privilege esc...
CVE-2021-40574
Removed by vendor...
CVE-2021-40571
Removed by vendor...
CVE-2021-40576
Removed by vendor...
PT-2022-12390 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: The issue is related to an invalid memory address dereference via the function gf list last. This allows attackers to cause a Denial of Service DoS. Recommendations: For GPAC version 1.1.0, as a temporary...
PT-2022-11268 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a null pointer dereference vulnerability in the gf isom get payt count function in hint track.c, which can be exploited by attackers to cause a denial of service. Recommendations: For Gp...
PT-2022-11263 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the ilst box read function in box code apple.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution and...
PT-2022-11264 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free bug in the av1dmx finalize function in reframe av1.c, which can cause a denial of service. This bug allows attackers to exploit the vulnerability, leading to a service...
GPAC 代码问题漏洞
GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the gfisomgetpaytcount function in the product's hinttrack.c file. An attacker could cause a denial of service via this vulnerability...
CVE-2021-40570
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...