2731 matches found
GPAC 安全漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 1.0.1, which originates from the schmboxsize function. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...
GPAC 安全漏洞
GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...
CVE-2021-40608
Removed by vendor...
CVE-2021-40944
Removed by vendor...
CVE-2021-40609
Removed by vendor...
CVE-2021-40606
Removed by vendor...
PT-2022-11343 · Unknown · Gpac Mp4Box
Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 1.1.0 Description: The issue is related to a Null pointer reference in the gf filter pid get packet function, located in src/filter core/filter pid.c at line 5394. This can cause a denial of service DOS. Recommendations: F...
CVE-2021-40606: Out-of-bounds Read
The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40944: NULL Pointer Dereference
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
CVE-2021-40609: Allocation of Resources Without Limits or Throttling
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40608: Use of Uninitialized Resource
The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40609
GPAC 1.0.1 is affected by CVE-2021-40609 due to GetHintFormat vulnerability that allows DoS via a crafted MP4Box file. Debian/DSA-5411 fixes upgrade to 1.0.1+dfsg1-4+deb11u2; other advisories recommend upgrading to newer GPAC versions. No exploitation details in provided documents.
GPAC 代码问题漏洞
GPAC is a multimedia framework. GPAC MP4Box version 1.1.0 suffers from a denial of service vulnerability that originates in the gfhintertrackfinalize function. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted file in the MP4Box command...
CVE-2021-40608
The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40609
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40606
The gfbswritedata function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40944
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...
CVE-2021-40607: Allocation of Resources Without Limits or Throttling
The schmboxsize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...
CVE-2021-40608
GPAC 1.0.1 is affected by CVE-2021-40608: the gf_hinter_track_finalize function can be triggered by a crafted MP4Box file to cause a denial of service. The vulnerability is derived from improper handling of error messages in gf_hinter_track_finalize. Debian security advisory DSA-5411-1 notes that...
