UBUNTU-CVE-2021-33366

Memory leak in the gfisomoinfreadentry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

UBUNTU-CVE-2021-33362

Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-32138

Removed by vendor...

CVE-2021-32138

GPAC 1.0.1 contains a denial-of-service vulnerability via a NULL pointer dereference in DumpTrackInfo triggered by a crafted MP4Box file. Affected component: GPAC’s DumpTrackInfo function. Impact: potential crash/DoS. Remediation: Gentoo GLSA recommends upgrading GPAC to the latest version (>=...

CVE-2021-32138

The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-33362

Removed by vendor...

CVE-2021-33362

GPAC MP4Box 1.0.1 is affected by a stack buffer overflow in hevc_parse_vps_extension, enabling DoS or arbitrary code execution via crafted files. This vulnerability is corroborated across multiple sources (NVD/OSV/CNVD). Gentoo GLSA 2024-08-21 recommends upgrading to GPAC >= 2.2.0 to mitigate ...

CVE-2021-33362

Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...

CVE-2021-32135

The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32135

The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32135

The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32135

The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-32135

The trakboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-32132

The abstboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-32132

The CVE-2021-32132 issue affects GPAC 1.0.1, where the abst_box_size function can trigger a NULL pointer dereference when processing a crafted MP4Box file, leading to a denial of service (availability impact). The provided documents consistently identify this as the underlying root cause and do n...