CVE-2019-20629

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20631

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20628

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Heap overflow

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Null pointer dereference

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gflistcount in utils/list.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20628

Removed by vendor...

CVE-2019-20628

GPAC before 0.8.0 (libgpac.a) contains a Use-After-Free in gf_m2ts_process_pmt (media_tools/mpegts.c) that can cause a denial of service via a crafted MP4 file. Affected component is demonstrated by MP4Box; no patch/version details are provided in the referenced documents.

CVE-2019-20629

GPAC prior to 0.8.0 contains a heap-based buffer over-read in gf_m2ts_process_pmt (media_tools/mpegts.c) within libgpac.a, exploitable via crafted MP4 files to cause a denial of service. This affects GPAC/MP4Box builds using the libgpac.a component. Remediation: upgrade GPAC to version 0.8.0 or l...

CVE-2019-20629

An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2019-20630

Removed by vendor...

CVE-2019-20630

GPAC before version 0.8.0 (libgpac.a) is affected by CVE-2019-20630 due to a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) within utils/bitstream.c. This can lead to denial of service when processing a crafted MP4 file. Multiple connected sources confirm the same issue a...

GPAC Null Pointer Dereference Vulnerability (CNVD-2019-40582)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the GetESD function in isomedia/track.c in libgpac.a in GPAC 0.7.1. No detailed vulnerability details are provided at this time...

PT-2019-5483

Name of the Vulnerable Software and Affected Versions GPAC versions 0.7.1 and earlier Description The issue is related to a Buffer Overflow in the gf sm load init function in scene manager.c in libgpac static.a. This vulnerability can be exploited to impact the confidentiality, integrity, and...