CVE-2021-45289

CVE-2021-45289 affects GPAC 1.0.1, caused by omission of security-relevant information that can lead to a denial of service (SIGKILL). Multiple sources corroborate a DoS in GPAC 1.0.1. Public details are consistent across NVD/CNVD/OSV-type entries. A remediation note appears in Gentoo GLSA 202408...

CVE-2021-45289

Removed by vendor...

CVE-2021-45288

Removed by vendor...

CVE-2021-45288

CVE-2021-45288 affects GPAC 1.0.1; a Double Free in filedump.c can cause Denial of Service via a crafted MP4Box file. Root cause: memory mismanagement leading to a crash. Impact is DoS; no explicit exploitation details provided in the sources. Remediation is not standardized across documents, but...

CVE-2021-45288

A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command...

in gpac/gpac

Description A null pointer dereference was discovered in BDCheckSFTimeOffset. The vulnerability causes a segmentation fault and application crash. Version: ./MP4Box -version MP4Box - GPAC version 1.1.0-DEV-revUNKNOWNREV c 2000-2021 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Pleas...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfdumpvrmldynfield.isra function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. gfsvggetattributename function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-45292

GPAC 1.0.1 has a vulnerability in gf_isom_hint_rtp_read that can cause a denial of service through a crafted MP4Box file, due to an invalid memory address dereference. This CVE is CVE-2021-45292. Remediation is to upgrade to a fixed GPAC release (e.g., Debian’s 1.0.1+dfsg1-4+deb11u2).

CVE-2021-45292

Removed by vendor...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

GPAC 安全漏洞

GPAC is an open source multimedia framework. gfdumpsetup function in GPAC version 1.0.1 has a denial of service vulnerability that stems from certain security-related information being missed and can be exploited by an attacker to cause a denial of service...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC has a null pointer dereference vulnerability in the BDCheckSFTimeOffset function, which can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

CVE-2021-45297

GPAC 1.0.1 contains an infinite loop in gf_get_bit_size (CVE-2021-45297). This GPAC multimedia framework issue can cause a denial-of-service condition (partial availability impact per CVSS info). Debian and Gentoo advisories note fixes up to 1.0.1+dfsg1-4+deb11u2; upgrade GPAC to the patched vers...

gpac 安全漏洞

GPAC is an open source multimedia framework. gflog function in GPAC version 1.1.0 has an infinite loop vulnerability that can be exploited by attackers to cause a denial of service...

PT-2021-24225 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows malicious users to cause a denial of service due to an invalid memory address dereference. This can be achieved via a crafted file in the MP4Box command, specifically exploiting the gf dump set...

CVE-2021-45291

Removed by vendor...

CVE-2021-45297

Removed by vendor...

PT-2021-24223 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A vulnerability exists due to an omission of security-relevant information, which could cause a Denial of Service. The program terminates with signal SIGKILL. Recommendations: For GPAC version 1.0.1, at the...