CVE-2018-20761

Removed by vendor...

CVE-2018-20761

GPAC 0.7.1 and earlier are affected by a Buffer Overflow in gf_sm_load_init (scene_manager.c) of libgpac_static.a. The issue is described across multiple advisories (USN-3926-1, MGASA/OSV/DLA entries) and can cause a crash and, in some disclosures, potentially arbitrary code execution when a spec...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20760

CVE-2018-20760 affects GPAC up to version 0.7.1, where gf_text_get_utf8_line in media_tools/text_import.c can cause an out-of-bounds write due to mishandled -1 return. Ubuntu/Debian advisories and OSV entries group this with other GPAC flaws (memory operation handling, buffer overflows) and warn ...

CVE-2018-20763

Removed by vendor...

CVE-2018-20762

Removed by vendor...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

CVE-2018-20763

GPAC vulnerability CVE-2018-20763 affects GPAC 0.7.1 and earlier; the issue is an out-of-bounds write in gf_text_get_utf8_line (media_tools/text_import.c) caused by missing szLineConv bounds checking. This memory-operations/bounds issue is associated with the GPAC MP4Box utility and can impact th...

CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20763

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...

CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

UBUNTU-CVE-2018-20760

In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...

CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

UBUNTU-CVE-2018-20762

GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the catmultiplefiles function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames...

UBUNTU-CVE-2018-20761

GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gfsmloadinit function in scenemanager.c in libgpacstatic.a...

PT-2023-15455 · Unknown +1 · Gpac Mp4Box +1

Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev644-g5c4df2a67 Description: The issue is related to a Buffer Overflow in the gf bs read data function. No information is provided about the estimated number of potentially affected devices worldwide or real-worl...

PT-2022-13608 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac/gpac versions prior to 2.1.0-DEV Description: The issue is related to a Segmentation Fault caused by MP4Box -lsr in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1.0-DEV, update to version 2.1.0-DEV or later t...

PT-2022-16713 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.1-DEV Description: The issue is related to an Integer Overflow or Wraparound in the GitHub repository gpac/gpac. Recommendations: For versions prior to 2.1-DEV, update to version 2.1-DEV or later to resolve the issue...

PT-2022-11278 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command, specifically through the GetHintFormat function. Recommendations: For GPAC version 1.0.1, consider disabling the...

PT-2022-27474 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev478-g696e6f868-master Description: A heap use-after-free issue was discovered via the Q IsTypeOn function at /gpac/src/bifs/unquantize.c. This issue affects the specified version of GPAC. Recommendations: For GPAC...