CVE-2026-4185 GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based overflow

A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master. This vulnerability affects the function swfdefbitsjpeg of the file src/scenemanager/swfparse.c of the component MP4Box. The manipulation of the argument szName results in stack-based buffer overflow. It is possible to laun...

Linux Distros Unpatched Vulnerability : CVE-2018-13066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWFDEFINEBUTTON2, parseSWFDEFINEFONT,...

Linux Distros Unpatched Vulnerability : CVE-2017-11705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak was found in the function parseSWFSHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_fwrite

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4782660769873920 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x513000000fbd Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_fwrite

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5226932353957888 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5160000044bc Crash State:...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in swf_def_bits_jpeg

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6201254983303168 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5030000016d1 Crash State:...

CVE-2024-28318

gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swfgetstring at scenemanager/swfparse.c:325...

left shift of negative value in scene_manager/swf_parse.c:213:12

Description left shift of negative value in MP4Box Version $ ./bin/gcc/MP4Box -version MP4Box - GPAC version 2.3-DEV-revrelease c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC...

DEBIAN-CVE-2022-47086

GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gfsmloadinitswf at scenemanager/swfparse.c...

CVE-2020-6628

Ming aka libming 0.4.8 has a heap-based buffer over-read in the function decompileSWITCH in decompile.c...

UBUNTU-CVE-2018-13251

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWFDEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

CVE-2018-13251

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWFDEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file...

UBUNTU-CVE-2018-13066

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWFDEFINEBUTTON2, parseSWFDEFINEFONT, parseSWFDEFINEFONTINFO, parseSWFDEFINELOSSLESS, parseSWFDEFINESPRITE, parseSWFDEFINETEXT, parseSWFDOACTION, parseSWFFILLSTYLEARRAY, parseSWFFRAMELABEL,...

SRC-2018-0024 : Adobe Flash Player SWF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-32685)

Adobe Flash Player is a multimedia program player. A memory corruption vulnerability exists in Adobe Flash Player's handling of SWFs, which could be exploited by remote attackers to submit a specially crafted SWF file and trick the user into parsing it, which could crash the application or execut...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

CVE-2017-3106

Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code execution...

PT-2017-15656 · Adobe +2 · Flash Player +2

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 26.0.0.137 and earlier Description: The issue is related to a type confusion vulnerability when parsing SWF files, which could lead to arbitrary code execution if successfully exploited. This allows an attacker to...

Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within SWF parsing. The iss...