CVE-2021-37231

CVE-2021-37231 : A stack-buffer-overflow in Atomicparsley 20210124.204813.840499f occurs via APar_readX() in src/util.cpp while parsing a crafted MP4 file due to a missing boundary check. This affects the AtomicParsley component and was discussed in multiple advisories. The vulnerability’s impact...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC has a buffer overflow vulnerability in v0.8.0, which originates from a buffer overflow in gfm2tssectioncomplete in mediatools/mpegts.c. An attacker could use this vulnerability to cause a denial of service DOS via a specially crafted MP4 file...

CVE-2021-37231

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

CVE-2021-37231

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through AParreadX in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check...

Adobe Media Encoder MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Media Encoder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Photoshop MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Prelude. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

Adobe After Effects MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Audition. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101193)

GPAC is an open source multimedia framework. versions prior to GPAC 0.8.0 have security vulnerabilities that can be exploited by attackers to cause a denial of service via a crafted MP4 file...

CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

Design/Logic Flaw

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

CVE-2020-19481

GPAC (before 0.8.0) is affected by CVE-2020-19481 due to an invalid memory read in gf_m2ts_process_pmt (media_tools/mpegts.c) that can cause a denial of service when processing a crafted MP4. Affected products: GPAC prior to 0.8.0; vulnerability details are documented across multiple feeds, and r...

CVE-2020-19481

An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gfm2tsprocesspmt in mediatools/mpegts.c that can cause a denial of service via a crafted MP4 file...

PT-2021-3927 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects version 18.2.1 and earlier Description: The issue is caused by improper input validation when parsing a specially crafted file, allowing an unauthenticated attacker to disclose arbitrary memory information in the context o...

Wonder Video Embed < 1.8 - Contributor+ Stored XSS

The plugin does not escape parameters of its wonderpluginvideo shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks. wonderpluginvideo iframe='youtube.com?v=dQw4w9WgXcQ" onload="alert1' videocss='animation-name:twentytwentyone-close-button-transition"...

Bento4 Denial of Service Vulnerability (CNVD-2023-00388)

Bento4 is an open source C library for reading and writing MP4 files. Bento4 version 1.5.1-628 suffers from a denial of service vulnerability that stems from an unhandled memory allocation failure in Core/Ap48bdlAtom.cpp, resulting in a NULL pointer dereference, which could be exploited by an...

Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...