CVE-2021-21845

GPAC Project on Advanced Content library (GPAC) version 1.0.1 contains multiple CVE-2021-21845 family integer overflow flaws in MPEG-4 decoding. Specifically, the issue is triggered in the stsc decoder (and related atoms/FOURCC paths) where unchecked arithmetic can overflow and allocate/offset me...

CVE-2021-21847

CVE-2021-21847 affects the GPAC Project on Advanced Content library (version 1.0.1) and is due to an unchecked arithmetic path in the MPEG-4 decoding for the MPEG-4 atom/parsing, specifically the stts decoder, leading to an integer overflow and a heap-based buffer overflow that causes memory corr...

CVE-2021-21847

Removed by vendor...

CVE-2021-21847

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21851

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “csgp” decoder sample group description indices can cause an integer overflow due to unchecked arithmeti...

CVE-2021-21851

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “csgp” decoder sample group description indices can cause an integer overflow due to unchecked arithmeti...

CVE-2021-21851

CVE-2021-21851 affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A crafted MPEG-4 input in the csgp decoder sample group description indices triggers unchecked arithmetic, causing a heap-based buffer overflow and memory corruption. Impact i...

CVE-2021-21851

Removed by vendor...

PT-2021-6768

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to multiple exploitable integer overflow vulnerabilities within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input in the "stsz" decoder c...

PT-2021-6539

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input at "csgp" decoder sample group...

CVE-2021-21852

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

PT-2021-6774

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description The issue is related to the absence of checks on the result of arithmetic operations in the URL decoder functionality of the GPAC multimedia platform's MPEG-4 decoding. This...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101187)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the correctness of additive operations. An attacker could exploit the vulnerability to cause memory corruption...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101189)

GPAC is an open source multimedia framework. a security vulnerability exists in GPAC Project Advanced Content, which stems from the failure of the product's MPEG-4 to check the correctness of additive operations. An attacker could cause memory corruption through this vulnerability...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101188)

GPAC is an open source multimedia framework. a buffer overflow vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the validity of arithmetic results. An attacker could cause memory corruption through this vulnerability...

GPAC can exploit integer truncation vulnerability

A security vulnerability exists in the MPEG-4 decoding functionality of the GPAC project on Advanced Content library v1.0.1, an open source multimedia framework. The vulnerability stems from the handling of the "hdlr" FOURCC code, where a carefully constructed MPEG-4 input could lead to incorrect...

GPAC input validation error vulnerability

GPAC is an open source multimedia framework. a security vulnerability exists in the MPEG-4 decoding feature of GPAC on Advanced Content library v1.0.1. An attacker could exploit the vulnerability to cause incorrect memory allocation via a carefully constructed MPEG-4 input, which could lead to a...

GPAC Project on Advanced Content integer overflow vulnerability

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-68450)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

CVE-2021-21858: Integer Overflow to Buffer Overflow

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...