CVE-2018-13008

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13009

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

CVE-2018-13006

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

CVE-2018-13007

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

CVE-2018-13006

Removed by vendor...

CVE-2018-13005

Removed by vendor...

CVE-2018-13009: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel conditional on a buffersizelongs check...

PT-2018-11533

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the function GPMF Next in GPMF parser.c, related to certain checks for GPMF KEY END and nest level, which can lead to a heap-based buffer over-read. This issue is not conditional...

PT-2018-11535

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the function GPMF Next, related to certain checks for GPMF KEY END and nest level conditional on a buffer size longs check, which leads to a heap-based buffer over-read in GPMF...

PT-2018-11534

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description An issue was discovered in the gpmf-parser, where there is a heap-based buffer over-read in the GPMF parser.c file, specifically in the function GPMF Next. This issue is related to certain checks for a...

CVE-2018-13006: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/boxdump.c function hdlrdump...

PT-2018-11537

Name of the Vulnerable Software and Affected Versions gpmf-parser version 1.1.2 Description A heap-based buffer over-read issue was discovered in the GPMF parser.c file, specifically in the GPMF Validate function. Recommendations For gpmf-parser version 1.1.2, consider disabling the GPMF Validate...

CVE-2018-13011: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFValidate...

CVE-2018-13008: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for a positive nestlevel...

CVE-2018-13007: Out-of-bounds Read

An issue was discovered in gpmf-parser 1.1.2. There is a heap-based buffer over-read in GPMFparser.c in the function GPMFNext, related to certain checks for GPMFKEYEND and nestlevel not conditional on a buffersizelongs check...

CVE-2018-13005: Out-of-bounds Read

An issue was discovered in MP4Box in GPAC 0.7.1. The function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read...

CVE-2018-12917

In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...

CVE-2018-12917

In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...

CVE-2018-12917: Out-of-bounds Read

In libpbc.a in PBC through 2017-03-02, there is a heap-based buffer over-read in pbcMipnew in map.c...

PT-2018-11474

Name of the Vulnerable Software and Affected Versions PBC versions prior to 2017-03-02 Description A heap-based buffer over-read issue exists in the pbcM ip new function in map.c of the libpbc.a library. Recommendations For versions prior to 2017-03-02, consider updating to a version released aft...