2731 matches found
CVE-2022-47661: Out-of-bounds Write
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via mediatools/avparsers.c:4988 in gfmedianaluaddemulationbytes...
CVE-2022-47659: Out-of-bounds Write
GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gfbsreaddata...
CVE-2022-47658: Buffer Copy without Checking Size of Input
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gfhevcreadvpsbsinternal of mediatools/avparsers.c:8039...
CVE-2022-47091: Buffer Copy without Checking Size of Input
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gftextprocesssub function of filters/loadtext.c...
CVE-2022-47660
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isomwrite.c...
GPAC MP4Box 安全漏洞
GPAC MP4Box is multimedia packager. It is mainly used for working with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS, etc. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev505-gb9577e6ad-master, which...
CVE-2022-47088: Buffer Copy without Checking Size of Input
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...
CVE-2022-47653
GPAC MP4Box 2.1-DEV-rev593-g007bf61a0 is affected by a Buffer Overflow in eac3_update_channels (media_tools/av_parsers.c:9113). Root cause: overflow in eac3_update_channels function. Impact: High on confidentiality, integrity, and availability; attack vector LOCAL with LOW complexity and NO privi...
CVE-2022-47656
GPAC MP4box 2.1-DEV-rev617-g85ce76efd is affected by CVE-2022-47656 due to a buffer overflow in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c:8273). Public sources in the connected documents consistently describe a buffer overflow vulnerability with a CVSS v3.1 base score of...
CVE-2022-47657
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is affected by CVE-2022-47657 due to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c:7662). The connected advisories indicate vendor-specific fixes: Debian's DSA-5411-1 patching to gpac 1.0.1+dfsg1-4+deb11u2, Gentoo GLSA-202408-21 reco...
CVE-2022-47086
GPAC MP4Box vulnerability CVE-2022-47086: a segmentation violation is triggered by gf_sm_load_init_swf in scene_manager/swf_parse.c affecting GPAC MP4Box v2.1-DEV-rev574-g9d5bb184. The issue is documented in multiple sources (NVD/NV D details) with CVSS 3.1 base score 5.5 (Medium) and a local att...
CVE-2022-47095
CVE-2022-47095 affects GPAC MP4box 2.1-DEV-rev574-g9d5bb184, vulnerable to a buffer overflow in hevc_parse_vps_extension (media_tools/av_parsers.c). The impact is reported as high (CVE-3.1 metrics: LOCAL, HIGH/CONF, HIGH/AV, with user interaction required). Connected sources confirm the vulnerabi...
CVE-2022-47091
GPAC MP4box 2.1-DEV-rev574-g9d5bb184 is affected by a Buffer Overflow in gf_text_process_sub within filters/load_text.c. The vulnerability can lead to denial of service or potentially arbitrary code execution. Debian has published a security update fixing multiple GPAC CVEs (including CVE-2022-47...
CVE-2022-47093
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmxm2ts.c:470 in m2tsdmxdeclarepid...
CVE-2022-47094
CVE-2022-47094 affects GPAC MP4box 2.1-DEV-rev574-g9d5bb184, with a NULL pointer dereference in filters/dmx_m2ts.c:343 (m2tsdmx_declare_pid). The CVE is linked to GPAC vulnerabilities that have led to advisories (Debian DSA-5411-1 and Gentoo GLSA-202408-21) recommending upgrading to patched GPAC ...
CVE-2022-47088
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow...
CVE-2022-47088
GPAC MP4Box 2.1-DEV-rev574-g9d5bb184b is vulnerable to a Buffer Overflow. The issue affects GPAC’s MP4Box component and is tracked as CVE-2022-47088 with a high impact (CONF/I/AV(H) = High) and local access required. Mitigation from Gentoo advisory GLSA-202408-21 recommends upgrading to GPAC 2.2....
CVE-2022-47094
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmxm2ts.c:343 in m2tsdmxdeclarepid...
