GPAC 代码问题漏洞

GPAC is an open-source multimedia framework. there is a security vulnerability in MP4Box before GPAC version 2.1.0-DEV, and no detailed vulnerability details are available...

CVE-2022-1035

GPAC: CVE-2022-1035 is a segmentation fault in MP4Box -lsr affecting gpac/gpac prior to 2.1.0-DEV. Connected sources indicate GPAC multiple-vulnerability advisories across Debian and Gentoo and confirm remediation via upgrading to newer GPAC versions (e.g., Gentoo GL SA recommends >= gpac-2.2....

CVE-2022-1035

Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV...

CVE-2022-1035

Removed by vendor...

CVE-2022-1035 Segmentation Fault caused by MP4Box -lsr in gpac/gpac

Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV...

Segmentation Fault caused by MP4Box -lsr

Version: MP4Box -version MP4Box - GPAC version 2.1-DEV-rev48-gf6d6225a9-master c 2000-2022 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io/ MINI build encoders, decoders, audio and video output disabled Please cite our work in your research: GPAC Filters:...

CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

DEBIAN-CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

DEBIAN-CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

Stack overflow

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

Design/Logic Flaw

GPAC 1.0.1 is affected by Use After Free through MP4Box...

CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

UBUNTU-CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

UBUNTU-CVE-2022-24575

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box...

CVE-2022-24576

GPAC 1.0.1 is affected by Use After Free through MP4Box...

CVE-2022-24576

GPAC 1.0.1 is affected by a Use After Free via MP4Box (CVE-2022-24576). The issue is a memory handling fault in GPAC's MP4Box component that can lead to partial availability impact. Public docs show remediation guidance via Gentoo GLSA: upgrade to GPAC 2.2.0 or newer. There is no explicit exploit...