Heap-based Buffer Overflow

libgpac.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in adtsdmxprocess function in reframeadts.c due to improper validations of buffer size which allows an attacker to cause an overflow resulting in an application crash...

Heap-based Buffer Overflow

libgpac.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in mp3dmxprocess function of filters/reframemp3.c due to improper validations of buffer size which allows an attacker to cause an overflow resulting in an application crash...

Heap-based Buffer Overflow

libgpac.so is vulnerable to Heap-based Buffer Overflow. A local attacker is able to cause heap-based buffer overflows due to improper validation logics in the avcparseslice function in avparsers.c...

Heap-based Buffer Overflow

libgpac.so is vulnerable to Heap-based Buffer Overflow. A local attacker is able to cause heap-based buffer overflows due to improper memory management operations in eac3updatechannels function of mediatools/avparsers.c...

Use After Free

libgpac.so is vulnerable to Use-After-Free. The vulnerability exists due to a lack of entity value validations in the m2tsdmxdeclarepid parameter in dmxm2ts.c which leads to memory consumption resulting in an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists through the heap-buffer-overflow in the schmboxread function of boxcodedrm.c because the function does not properly check the length of URI, allowing an attacker to crash the application by providing a maliciously crafted fil...

Information Disclosure

libgpac.so is vulnerable to information disclosure. A local attacker is able to gain access to sensitive user information due to a memory leak in the gfisomgetrootod function in MP4Box using a specifically crafted file...

Buffer Overflow

libgpac.so is vulnerable to buffer overflows. The vulnerability exists in diSTboxread in boxcode3gpp.c because when gpac parses an mp4 file, the video content and the buffer length is controllable by the user which causes a stack overflow...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists because it causes stack overflow in the function gfnodegetname at scenegraph/basescenegraph.c, leading to an application crash...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to an improper type checking in the function gfsgvrmlfieldpointerdel at scenegraph/vrmltools.c, causing NULL pointer dereference...

Denial Of Service (DoS)

libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid memory address dereference via the function lsrreadid...

Denial Of Service (DoS)

libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid memory address dereference via the function shiftchunkoffsets.isra...

Denial Of Service (DoS)

libgpac is vulnerable to denial of service. The vulnerability exists due to an invalid call in the function gfnodechanged...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The vulnerability exists due to null pointer deference in the gfavcparsenalu function in avparsers.c, which causes a segmentation fault, allowing an attacker to crash the application...

Denial Of Service (DoS)

libgpac.so is vulnerable to denial of service. The attacker can send a malicious file to the function ilstitemboxdump located in boxdump.c, causing a null pointer dereference and application crash...

CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...

CVE-2020-11558

An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audiosampleentryRead in isomedia/boxcodebase.c does not properly decide when to make gfisomboxdel calls. This leads to various use-after-free outcomes involving mdiaRead, gfisomdeletemovie, and gfisomparsemovieboxes...

CVE-2019-20629

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

DEBIAN-CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...