PT-2022-11262 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: Gpac version 1.0.1 Description: The issue is related to a double-free vulnerability in the avc compute poc function in av parsers.c, which can be exploited by attackers to cause a denial of service, potentially leading to code execution and...

CVE-2021-40571

GPAC mp4box 1.0.1 has a double-free in ilst_box_read (box_code_apple.c) that can cause denial of service and potentially code execution/privilege escalation. Debian fixes gpac to 1.0.1+dfsg1-4+deb11u2; upgrade recommended. Other connected sources corroborate GPAC vulnerabilities; no additional ex...

CVE-2021-40576

GPAC GNU GPAC 1.0.1 contains a null pointer dereference in gf_isom_get_payt_count (hint_track.c) that allows denial of service via MP4Box. The CVE-2021-40576 entry is confirmed across multiple trusted sources (NVD, CNVD, Debian DSAs) and is associated with the GPAC multimedia framework. Exploitat...

CVE-2021-45760

Removed by vendor...

CVE-2021-40572

Removed by vendor...

CVE-2021-40569

Removed by vendor...

CVE-2021-40575

Removed by vendor...

CVE-2021-40570

Removed by vendor...

GPAC null pointer dereference vulnerability (CNVD-2022-04960)

GPAC is an open source multimedia framework. GPAC null pointer dereference vulnerability can be exploited by attackers to cause a denial of service...

GPAC buffer overflow vulnerability (CNVD-2022-08469)

GPAC is an open source multimedia framework. GPAC suffers from a security vulnerability that originates from a heabased buffer overflow vulnerability in MP4Box for GPAC 1.0.1, which can be exploited by an attacker to cause a denial of service or execute arbitrary code via a crafted file...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. A code issue vulnerability exists in GPAC, which stems from a reference to a null pointer in the mpgviddmxprocess function in the product's reframempgvid.c file. An attacker could cause a denial of service through this vulnerability...

CVE-2021-45760

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gflistlast. This vulnerability allows attackers to cause a Denial of Service DoS...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. v1.1.0 of GPAC contains a security vulnerability that stems from the function gflistlast containing an invalid memory address dereference. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-40575

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmxprocess function in reframempgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566...

CVE-2021-45760

GPAC v1.1.0 contains an invalid memory address dereference via gf_list_last(), leading to a Denial of Service (CVE-2021-45760). The connected advisories (e.g., Debian DSA-5411, Gentoo GLSA 2024) reference this CVE among multiple GPAC vulnerabilities and recommend upgrading to newer GPAC releases ...

CVE-2021-40574

The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability, which can be exploited by attackers to cause denial of service and even code execution and elevation of privilege...

GPAC buffer overflow vulnerability (CNVD-2022-08468)

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 1.0.1, which stems from a heap-based buffer overflow vulnerability in MP4Box of GPAC 1.0.1, which can be exploited by an attacker to produce unspecified other impacts through files made in MP4Box commands by usin...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-40574

GPAC GPAC is affected: the MP4Box binary (GPAC) from 0.9.0-preview to 1.0.1 contains a double-free in gf_text_get_utf8_line (load_text.c), enabling denial of service and potentially code execution/privilege escalation. Debian advisory DSA-5411-1 fixes this in bullseye with gpac version 1.0.1+dfsg...