CVE-2019-20168

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

Linux Distros Unpatched Vulnerability : CVE-2019-20168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

gpac:fuzz_parse: Segv on unknown address in gf_free

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6246192254418944 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzparse Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gffree...

gpac:fuzz_parse: Crash in gf_free

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4813050475053056 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002838c79 Crash State: gffree...

PT-2021-11891 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 1.0.1 Description: An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which is a use-after-free. Recommendations: For GPAC version 0.8.0, update to a version that fixes the...

PT-2020-12692

Name of the Vulnerable Software and Affected Versions GPAC version 0.8.0 Description An issue in libgpac.a, as demonstrated by MP4Box, leads to improper decision-making in audio sample entry Read in isomedia/box code base.c regarding gf isom box del calls. This results in use-after-free outcomes...

PT-2019-16113

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description A use-after-free issue was found in the function gf isom box dump ex in isomedia/box funcs.c. Recommendations For GPAC version 0.8.0, update to a version that fixes this issue...

PT-2019-16109

Name of the Vulnerable Software and Affected Versions GPAC versions 0.8.0 through 0.9.0-development-20191109 Description An issue was discovered in the function gf isom box del in isomedia/box funcs.c, which results in a NULL pointer dereference. Recommendations For GPAC version 0.8.0, there is n...

GPAC gf_isom_box_del function has uaf vulnerability

GPAC is an open source multimedia framework. A uaf vulnerability exists in the GPAC gfisomboxdel function, which can be exploited by attackers to cause memory corruption...