2731 matches found
CVE-2021-46313
Removed by vendor...
CVE-2021-46313
GPAC’s MP4Box (v1.0.1) contains a segmentation fault in __memmove_avx_unaligned_erms that can lead to a DoS. Multiple sources (NVD entry CVE-2021-46313; CNVD/OSV/Nessus/Gentoo GLSA references) corroborate the vulnerability. remediation guidance in Gentoo GLSA 202408-21 recommends upgrading GPAC t...
CVE-2021-46313
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46239
The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46239
Removed by vendor...
CVE-2021-46239
GPAC MP4Box (GPAC v1.1.0) contains an invalid free vulnerability in gf_free() in utils/alloc.c that can lead to a Denial of Service (CVE-2021-46239). Multiple sources confirm the issue affects GPAC v1.1.0 and describe the DoS impact. Remediation available in upstream Gentoo advisory: upgrade to G...
CVE-2021-46239
The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...
GPAC 安全漏洞
GPAC is an open source multimedia framework. a security vulnerability exists in GPAC, which stems from a binary MP4Box in GPAC v1.0.1 that was found to contain a segmentation error via the function memmove avx unaligned erms. An attacker could exploit this vulnerability to cause a denial of servi...
PT-2022-12615
Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description The issue is related to an invalid free vulnerability in the binary MP4Box, which can lead to a Denial of Service DoS. This vulnerability occurs via the function gf free at utils/alloc.c. Recommendations For GPAC...
PT-2022-12634
Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description A segmentation fault was discovered in the binary MP4Box via the function memmove avx unaligned erms, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.0.1, as a temporary workaround,...
CVE-2021-46313: Undefined Security Weakness
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function memmoveavxunalignederms . This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46239: Use After Free
The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gffree at utils/alloc.c. This vulnerability can lead to a Denial of Service DoS...
Heap-based Buffer Overflow in gpac/gpac
Description When fuzzing gpac with clang 10 I found a heap overflow. Proof of Concept pocgffprintf Crash stack trace aldo@vps:/gpac/bin/gcc$ ASANOPTIONS=symbolize=1 ASANSYMBOLIZERPATH=/usr/bin/llvm-symbolizer ./MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null...
None in gpac/gpac
Description Use After Free in gpac Proof of Concept MP4Box -bt POC4 MP4Box -bt POC5 POC4 is here. POC5 is here. ASAN ==414586==ERROR: AddressSanitizer: heap-use-after-free on address 0x6100000007fc at pc 0x7f7926081250 bp 0x7ffd2e84f4a0 sp 0x7ffd2e84f490 READ of size 4 at 0x6100000007fc thread T0...
in gpac/gpac
Description Null Pointer Dereference in gfdumpvrmlfield.isra Proof of Concept MP4Box -bt POC2 POC2 is here. Bt Program received signal SIGSEGV, Segmentation fault. 0x0000000000644ca4 in gfdumpvrmlfield.isra LEGEND: STACK | HEAP | CODE | DATA | RWX | RODATA...
Denial Of Service (DoS)
binary MP4Box in Gpac is vulnerable to denial of service. The vulnerability exists due to a double-free vulnerability in the gftextgetutf8line function in loadtext.c...
Denial Of Service (DoS)
libgpac.so is vulnerable to denial of service. Parsing a malicious file in the gfodfsizedescriptor function in descprivate.c while using mp4box causes a double-free, leading to an application crash...
GPAC has an unspecified vulnerability (CNVD-2022-04959)
GPAC is an open source multimedia framework. version 1.0.1 of GPAC contains a security vulnerability that stems from the existence of a context-dependent abort failure in MP4Box, which could be exploited by an attacker to cause a denial of service...
DEBIAN-CVE-2021-40574
The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...