255 matches found
CVE-2019-20164
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a NULL pointer dereference in gf_isom_box_del() (isomedia/box_funcs.c), identified as CVE-2019-20164. The connected sources consistently describe this issue, but do not provide exploitation details, affected package releases beyond those ...
CVE-2019-20164
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...
CVE-2019-20164
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...
CVE-2019-20165
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...
CVE-2019-20166
The CVE-2019-20166 issue affects_GPAC versions 0.8.0 and 0.9.0-development-20191109, caused by a NULL pointer dereference in gf_isom_dump() inside isomedia/box_dump.c. Multiple feeds (NVD, Red Hat, OSV, Ubuntu/NASL) confirm the same root cause and affected component without presenting public expl...
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20167
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in isomedia/boxcodedrm.c...
CVE-2019-20167
Summary (CVE-2019-20167): GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a NULL pointer dereference in the function senc_Parse() within isomedia/box_code_drm.c . This is the root cause described across multiple feeds (NVD, Red Hat, Ubuntu, OSV, etc.). Impact stated in sources: potenti...
CVE-2019-20168
GPAC versions 0.8.0 and 0.9.0-development-20191109 contain a use-after-free in gf_isom_box_dump_ex() of isomedia/box_funcs.c. The vulnerability is a memory-management bug observed during box dump handling, with the impact described as potential crashes or undefined behavior. No exploit specifics ...
CVE-2019-20168
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...
CVE-2019-20169
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...
CVE-2019-20169
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trakRead in isomedia/boxcodebase.c...
CVE-2019-20171
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metxNew in isomedia/boxcodebase.c and abstRead in isomedia/boxcodeadobe.c...
GPAC Memory Leakage Vulnerability
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in dinfRead in isomedia/boxcodebase.c in GPAC 0.7.1. No detailed vulnerability details are provided at this time...
GPAC Buffer Overflow Vulnerability (CNVD-2019-40502)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A heap buffer overflow vulnerability exists in audiosampleentryAddBox in isomedia/boxcodebase.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of servic...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
CVE-2018-21017
GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c...
Null pointer dereference
AVCDuplicateConfig at isomedia/avcext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file. There is "cfgnew-AVCLevelIndication = cfg-AVCLevelIndication;" but cfg could be NULL...
