CVE-2021-31254: Out-of-bounds Write

Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes...

CVE-2021-31256: Missing Release of Memory after Effective Lifetime

Memory leak in the stblGetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...

CVE-2021-31258: NULL Pointer Dereference

The gfisomsetextractionslc function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-31260: NULL Pointer Dereference

The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

CVE-2021-30022: Integer Overflow or Wraparound

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

CVE-2021-30014: Integer Overflow or Wraparound

There is a integer overflow in mediatools/avparsers.c in the hevcparseslicesegment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the HintFile function in GPAC version 1.0.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of service...

GPAC 缓冲区错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap overflow vulnerability exists in the adtsdmxprocess function in filters/reframeadts.c in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a program cra...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the AV1DuplicateConfig function in GPAC version 1.0.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...

CVE-2021-31262: NULL Pointer Dereference

The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-19228

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the AV1 DuplicateConfig function...

PT-2021-19225

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom cenc get default info...

PT-2021-18661

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a Null Pointer Dereference in the gf filter pck get data function, which can be triggered by a crafted mp4 file. This results in a crash when the first argument pck is null. Recommendation...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the filtercore/filterpck.c:gffilterpcknewallocinternal function in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

GPAC 代码问题漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in GPAC version 1.0.1 in filters/reframelatm.c when calling gffilterpckgetdata. An attacker could exploit this vulnerability via a specially crafted mp4 file to...

PT-2021-18571

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A crafted file may cause ctx-hdr.frame size to be smaller than ctx-hdr.hdr size, resulting in a negative size and a heap overflow in the memcpy function. This issue is related to the adts dmx process function in...

GPAC Null Pointer Dereference Vulnerability (CNVD-2021-30188)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the MergeTrack function of the isomedia/track.c module in GPAC v0.5.2. An attacker can exploit this vulnerability by uploading a malicious MP4 file to execute...

DEBIAN-CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...

CVE-2021-28300

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...