GPAC Code Issue Vulnerability (CNVD-2021-103390)

GPAC is an open source multimedia framework. a code issue vulnerability exists in GPAC, which stems from an error in the processing logic of the product's gfgetbitsize function. An attacker could cause a denial of service through this vulnerability...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

CVE-2021-37706

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

UBUNTU-CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

CVE-2021-43804

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

GPAC null pointer dereference vulnerability (CNVD-2022-03624)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC contains a null pointer dereference vulnerability in the dumpodtosaf.isra function, which can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-43804 Out-of-bounds read when parsing RTCP BYE message in PJSIP

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming RTCP BYE message contains a reason's length, this declared length is not checked against th...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

GPAC null pointer dereference vulnerability (CNVD-2022-03622)

GPAC is an open source multimedia framework. gfisomparsemovieboxesinternal function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-37706 Potential integer underflow upon receiving STUN message in PJSIP

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...

GPAC null pointer dereference vulnerability (CNVD-2022-03618)

GPAC is an open source multimedia framework. gfsgvrmlmfalloc function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC infinite loop vulnerability

GPAC is an open source multimedia framework. gflog function in GPAC version 1.1.0 has an infinite loop vulnerability that can be exploited by attackers to cause a denial of service...

GPAC null pointer dereference vulnerability (CNVD-2022-03620)

GPAC is an open source multimedia framework. gfnodegetfield function in GPAC version 1.1.0 is vulnerable to a null pointer dereference, which can be exploited by attackers to cause segmentation errors and application crashes...

CVE-2021-37706

CVE-2021-37706 affects the pjproject/PJSIP stack embedded in various products. If an incoming STUN message contains an ERROR-CODE attribute, the code path does not check the header length before a subtraction, enabling an integer underflow that could let a malicious actor remotely execute code vi...

GPAC null pointer dereference vulnerability (CNVD-2022-03619)

GPAC is an open source multimedia framework. gfnodegettag function in GPAC version 1.1.0 has a null pointer dereference vulnerability that can be exploited by attackers to cause segmentation errors and application crashes...

GPAC double release vulnerability

GPAC is an open source multimedia framework. version 1.0.1 of GPAC has a double-release vulnerability in filedump.c, which can be exploited by attackers to cause a denial of service with the help of a specially crafted MP4Box command...

GPAC Denial of Service Vulnerability (CNVD-2022-03628)

GPAC is an open source multimedia framework. gfdumpsetup function in GPAC version 1.0.1 has a denial of service vulnerability that stems from certain security-related information being missed and can be exploited by an attacker to cause a denial of service...

GPAC Denial of Service Vulnerability (CNVD-2022-03626)

GPAC is an open source multimedia framework. gfisomhintrtpread function in GPAC version 1.0.1 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service with the help of a specially crafted MP4Box command...