7509 matches found
CVE-2021-30014
GPAC contains an integer overflow in media_tools/av_parsers.c (hevc_parse_slice_segment) affecting v0.9.0-preview through 1.0.1, leading to a crash. The issue is described across CVE-2021-30014 and CNVD-2021-30183; multiple sources corroborate the overflow in GPAC’s av_parsers.c. Severity metrics...
CVE-2021-30022
GPAC vulnerability CVE-2021-30022 stems from an integer overflow in media_tools/av_parsers.c (gf_avc_read_pps_bs_internal). Affected GPAC versions range from 0.5.2 to 1.0.1; pps_id may be negative, while avc->pps has 255 units, causing a crash. Public disclosures in NVD/CNVD/OSV/NASL variants ...
CVE-2021-30199
Removed by vendor...
CVE-2021-30022
Removed by vendor...
CVE-2021-30020
Removed by vendor...
CVE-2021-30015
Removed by vendor...
CVE-2021-30014
Removed by vendor...
CVE-2021-29279
Removed by vendor...
CVE-2021-29279
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...
CVE-2021-30019
GPAC 1.0.1 contains a heap overflow in the adts_dmx_process function (filters/reframe_adts.c) when a crafted ADTS file makes ctx->hdr.frame_size smaller than ctx->hdr.hdr_size, causing a negative size in memcpy. This is a confirmed vulnerability (CVE-2021-30019) with a documented impact on ...
CVE-2021-30020
GPAC 1.0.1 contains a heap overflow in gf_hevc_read_pps_bs_internal (media_tools/av_parsers.c) where a crafted file may cause pps->num_tile_columns to exceed the size of pps->column_width, leading to a heap overflow. Multiple sources corroborate this CVE-2021-30020 vulnerability (NVD, CNVD/...
CVE-2021-30199
In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...
CVE-2021-30019
Removed by vendor...
CVE-2021-31256
Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-31261
The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...
DEBIAN-CVE-2021-31262
The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-31259
The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
DEBIAN-CVE-2021-31261
The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...