78 matches found
CVE-2021-30020
In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...
Design/Logic Flaw
In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...
CVE-2021-30020
GPAC 1.0.1 contains a heap overflow in gf_hevc_read_pps_bs_internal (media_tools/av_parsers.c) where a crafted file may cause pps->num_tile_columns to exceed the size of pps->column_width, leading to a heap overflow. Multiple sources corroborate this CVE-2021-30020 vulnerability (NVD, CNVD/...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. A heap-based buffer over-read in isomedia/isomread.c in libgpac.a allows an attacker to crash the application from gfm2tssync in mediatools/mpegts.c...
Denial Of Service (DoS)
gpac is vulnerable to denial of service. A use-after-free in gfm2tsprocesspmt in mediatools/mpegts.c allows an attacker to crash the application via a malicious MP4 file...
Out Of Bound Write
gpac:xenial is vulnerable to out-of-bound writes. gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...
CVE-2019-20629
An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...
Null pointer dereference
An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfm2tsstreamprocesspmt in mediatools/m2tsmux.c...
CVE-2020-6631
CVE-2020-6631 concerns GPAC version 0.8.0, where a NULL pointer dereference occurs in the function gf_m2ts_stream_process_pmt() within the file media_tools/m2ts_mux.c . The provided sources consistently describe the same issue across multiple feeds (NVD, Red Hat, Debian/OSV OSV, UBUNTU CVEs, etc....
CVE-2019-20160
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1parsetilegroup in mediatools/avparsers.c...
CVE-2019-13618
In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c...
CVE-2019-13618
In GPAC before 0.8.0, isomedia/isomread.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gfm2tssync in mediatools/mpegts.c...
CVE-2018-20760
In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...
CVE-2018-20760
In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because a certain -1 return value is mishandled...
CVE-2018-20763
In GPAC 0.7.1 and earlier, gftextgetutf8line in mediatools/textimport.c in libgpacstatic.a allows an out-of-bounds write because of missing szLineConv bounds checking...
CVE-2018-7752
GPAC through 0.7.1 has a Buffer Overflow in the gfmediaavcreadsps function in mediatools/avparsers.c, a different vulnerability than CVE-2018-1000100...
CVE-2018-7752
GPAC has a Buffer Overflow in MP4Box (gpac up to version 0.7.1) in media_tools/av_parsers.c (gf_media_avc_read_sps), associated with CVE-2018-7752 and related CVEs. Exploitation could occur via a crafted MP4 file, potentially enabling remote code execution. Mitigations are distribution-specific p...