CVE-2021-40564

GPAC (multimedia framework) is affected by CVE-2021-40564 through version 1.0.2, due to a null pointer dereference in avc_parse_slice() within av_parsers.c when mp4box is used, causing a denial of service. Public references from NVD/CNVD describe the segmentation fault as the underlying issue; De...

CVE-2021-40565

GPAC is affected by CVE-2021-40565 due to a null pointer dereference in the gf_avc_parse_nalu function (av_parsers.c) when using mp4box, leading to a denial of service on versions up to 1.0.1. Exploitation could crash the application; Debian and Gentoo advisories indicate remediation via upgradin...

CVE-2021-36417

CVE-2021-36417 describes a heap-based buffer overflow in GPAC v1.0.1, specifically in the MP4Box function gf_isom_dovi_config_get, enabling denial of service or arbitrary code execution via a crafted MP4 file. The issue affects GPAC and has been addressed in Debian’s DSA-5411 advisory with a fix ...

CVE-2021-40566

A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmxprocess function in reframempgvid.c when using mp4box, which causes a denial of service...

CVE-2021-40563

GPAC (the GPAC multimedia framework) has a vulnerability CVE-2021-40563 affecting the naludmx_create_avc_decoder_config path in reframe_nalu.c when using mp4box. The issue is a null pointer dereference that can trigger a segmentation fault, resulting in a denial of service in GPAC up to version 1...

PT-2022-10514 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A heap-based buffer overflow issue exists in the gf isom dovi config get function in MP4Box, which can cause a denial of service or allow the execution of arbitrary code via a crafted file. Recommendations: For...

CVE-2021-36417

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gfisomdoviconfigget function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. GPAC is vulnerable to a denial of service before 1.0.1. The vulnerability stems from a segmentation error in the avcparseslice function in avparsers.c caused by null pointer dereference. An attacker could exploit this vulnerability to cause a denial of...

CVE-2021-40565

A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using mp4box, which causes a denial of service...

CVE-2021-40564

A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avcparseslice function in avparsers.c when using mp4box, which causes a denial of service...

CVE-2021-40562

Removed by vendor...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC before 1.0.1, which can be exploited by an attacker to trigger a denial of service via the mpgviddmxprocess function in reframempgvid.c...

CVE-2021-40563

A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmxcreateavcdecoderconfig function in reframenalu.c when using mp4box, which causes a denial of service...

CVE-2021-40559

GPAC (up to version 1.0.1) contains a null pointer deference in naludmx_parse_nal_avc within reframe_nalu, leading to a denial of service. This vulnerability is documented as CVE-2021-40559. Debian’s security advisory DSA-5411-1 notes that issues in GPAC were fixed in Debian bullseye at version 1...

CVE-2021-40562

A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmxenqueueordispatch function in reframenalu.c, which causes a denial of service...

GPAC 安全漏洞

GPAC is an open source multimedia framework. a security vulnerability exists prior to GPAC 1.0.1, which stems from a segmentation error in the naludmxenqueueordispatch function in reframenalu.c caused by a floating-point exception. No detailed vulnerability details are available at this time...

CVE-2021-40559

A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmxparsenalavc function in reframenalu, which allows a denail of service...

DEBIAN-CVE-2021-36414

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...

CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gprtpbuilderdompeg12video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,...