2588 matches found
CVE-2021-30019
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
CVE-2021-30019
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
UBUNTU-CVE-2021-30019
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
Null pointer dereference
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
CVE-2021-29279
Removed by vendor...
CVE-2021-29279
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...
CVE-2021-29279
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...
CVE-2021-30019
GPAC 1.0.1 contains a heap overflow in the adts_dmx_process function (filters/reframe_adts.c) when a crafted ADTS file makes ctx->hdr.frame_size smaller than ctx->hdr.hdr_size, causing a negative size in memcpy. This is a confirmed vulnerability (CVE-2021-30019) with a documented impact on ...
CVE-2021-29279: Integer Overflow or Wraparound
There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue value,maybe value-value.data.size is a negative number. In result, memcpy in gfpropsassignvalue failed...
CVE-2021-30019: Out-of-bounds Write
In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...
PT-2021-18571
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A crafted file may cause ctx-hdr.frame size to be smaller than ctx-hdr.hdr size, resulting in a negative size and a heap overflow in the memcpy function. This issue is related to the adts dmx process function in...
PT-2021-18159
Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to an integer overflow in the gf props assign value function, located in filter core/filter props.c. This overflow occurs when the value-value.data.size is a negative number, causing the...
SUSE: Security Advisory (SUSE-SU-2020:3749-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-8XJQ-8FCG-G5HW Out-of-bounds Write in Pillow
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...
Out-of-bounds Write in Pillow
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...
DEBIAN-CVE-2021-25290
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...
CVE-2021-25290
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...
CVE-2021-25290
An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size...