CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22673

GPAC MP4Box 0.8.0 is affected by CVE-2020-22673 due to a memory leak in the senc_Parse function, which can allow an attacker to trigger a denial of service via crafted input. Impact is a DoS with partial availability impact per CVSS. No exploit details are provided beyond the CVE entry; remediati...

CVE-2020-22675

An issue was discovered in gpac 0.8.0. The GetGhostNum function in stblread.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22675

The CVE-2020-22675 issue affects GPAC 0.8.0 where GetGhostNum in stbl_read.c has a heap-based buffer overflow that can cause a Denial of Service via crafted input. This is documented across multiple feeds (NVD/Numerous OSV/NASL entries) and is not a vendor patch detail in the core CVE entry. Some...

CVE-2020-22674

GPAC vulnerability CVE-2020-22674 affects gpac 0.8.0. An invalid memory dereference in FixTrackID (isom_intern.c) allows DoS via crafted input. Affected component is the GPAC MPEG-4 Systems implementation; impact is denial of service with potential crash. Remediation: upgrade to a newer GPAC rele...

CVE-2020-22675

Removed by vendor...

CVE-2020-22674

Removed by vendor...

CVE-2020-22674

An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isomintern.c, which allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22677

GPAC 0.8.0 is affected by CVE-2020-22677 due to a heap-based buffer overflow in dump_data_hex() within box_dump.c, which can cause a denial of service via crafted input. This vulnerability is confirmed across multiple feeds (NVD/CNVD/OSV/Gentoo GLSA), and remediation is to upgrade to a newer GPAC...

CVE-2020-22677

An issue was discovered in gpac 0.8.0. The dumpdatahex function in boxdump.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22677

Removed by vendor...

CVE-2020-22679

Removed by vendor...

CVE-2020-22678

GPAC CVE-2020-22678 affects gpac 0.8.0. The vulnerability is a heap-based buffer overflow in the gf_media_nalu_remove_emulation_bytes function (av_parsers.c) that can trigger a denial of service via crafted input. Connected sources corroborate the same issue across multiple advisories; no explici...

CVE-2020-22679

GPAC MP4Box (gpac 0.8.0) has a memory leak in sgpd_parse_entry that can cause DoS via a crafted input (CVE-2020-22679). The issue is documented across multiple sources; exploitation status is not provided in the supplied documents. Remediation: upgrade GPAC to a newer version; GLSA-202408-21 reco...

CVE-2020-22679

Memory leak in the sgpdparseentry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service DoS via a crafted input...

CVE-2020-22678

An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial of service DOS via a crafted input...

CVE-2020-22678

Removed by vendor...

gpac MP4Box安全漏洞

Gpac MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.Gpac MP4Box suffers from a memory leak vulnerability that can be exploited by attackers to cause a...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a buffer error vulnerability that stems from an issue discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow that can be exploited by an attacker to cause a denial of...

gpac MP4Box安全漏洞

GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP, but it can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, and so on. A security vulnerability exists in GPAC MP4Box that originates when a networked syste...