CVE-2021-21845

GPAC Project on Advanced Content library (GPAC) version 1.0.1 contains multiple CVE-2021-21845 family integer overflow flaws in MPEG-4 decoding. Specifically, the issue is triggered in the stsc decoder (and related atoms/FOURCC paths) where unchecked arithmetic can overflow and allocate/offset me...

CVE-2021-21845

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21845

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

CVE-2021-21847 affects the GPAC Project on Advanced Content library (version 1.0.1) and is due to an unchecked arithmetic path in the MPEG-4 decoding for the MPEG-4 atom/parsing, specifically the stts decoder, leading to an integer overflow and a heap-based buffer overflow that causes memory corr...

CVE-2021-21851

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “csgp” decoder sample group description indices can cause an integer overflow due to unchecked arithmeti...

CVE-2021-21851

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “csgp” decoder sample group description indices can cause an integer overflow due to unchecked arithmeti...

CVE-2021-21851

CVE-2021-21851 affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A crafted MPEG-4 input in the csgp decoder sample group description indices triggers unchecked arithmetic, causing a heap-based buffer overflow and memory corruption. Impact i...

CVE-2021-21852

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21852

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101189)

GPAC is an open source multimedia framework. a security vulnerability exists in GPAC Project Advanced Content, which stems from the failure of the product's MPEG-4 to check the correctness of additive operations. An attacker could cause memory corruption through this vulnerability...

GPAC has an unspecified vulnerability

A security vulnerability exists in GPAC Project Advanced Content, an open source multimedia framework, which stems from multiple exploitable integer overflow vulnerabilities in the MPEG-4 decoding functionality of Advanced Content. A specially crafted MPEG-4 file input could cause an integer...

GPAC can exploit integer truncation vulnerability

A security vulnerability exists in the MPEG-4 decoding functionality of the GPAC project on Advanced Content library v1.0.1, an open source multimedia framework. The vulnerability stems from the handling of the "hdlr" FOURCC code, where a carefully constructed MPEG-4 input could lead to incorrect...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101187)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the correctness of additive operations. An attacker could exploit the vulnerability to cause memory corruption...

CVE-2021-21852

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains multiple exploitable integer overflow flaws in the MPEG-4 decoding path, specifically a heap-based buffer overflow triggered by unchecked arithmetic in the stss decoder. This can lead to memory corruption when a user opens a crafted ...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-68450)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

GPAC Project on Advanced Content integer overflow vulnerability

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

GPAC has an unspecified vulnerability

A security vulnerability exists in GPAC Project Advanced Content, an open source multimedia framework, which stems from multiple exploitable integer overflow vulnerabilities in the MPEG-4 decoding functionality of Advanced Content. A specially crafted MPEG-4 file input could cause an integer...

GPAC input validation error vulnerability

GPAC is an open source multimedia framework. a security vulnerability exists in the MPEG-4 decoding feature of GPAC on Advanced Content library v1.0.1. An attacker could exploit the vulnerability to cause incorrect memory allocation via a carefully constructed MPEG-4 input, which could lead to a...