Gpac
by Gpac
Source repositories
CVEs (423)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-30019 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to be a negative number and a heap overflow in the memcpy. | ||
| CVE-2021-30015 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal. | ||
| CVE-2021-30014 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash. | ||
| CVE-2021-29279 | Hig | 0.00 | 7.8 | 0.01 | Apr 19, 2021 | There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed. | ||
| CVE-2021-31262 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. | ||
| CVE-2021-31261 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command. | ||
| CVE-2021-31260 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. | ||
| CVE-2021-31259 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. | ||
| CVE-2021-31258 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. | ||
| CVE-2021-31257 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. | ||
| CVE-2021-31256 | Med | 0.00 | 5.5 | 0.01 | Apr 19, 2021 | Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. | ||
| CVE-2021-31255 | Hig | 0.00 | 7.8 | 0.01 | Apr 19, 2021 | Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file. | ||
| CVE-2021-31254 | Hig | 0.00 | 7.8 | 0.01 | Apr 19, 2021 | Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes. | ||
| CVE-2020-11558 | Cri | 0.00 | 9.8 | 0.02 | Apr 5, 2020 | An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide when to make gf_isom_box_del calls. This leads to various use-after-free outcomes involving mdia_Read,… | ||
| CVE-2019-20208 | Med | 0.00 | 5.5 | 0.01 | Jan 2, 2020 | dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow. | ||
| CVE-2018-21017 | Med | 0.00 | 6.5 | 0.01 | Sep 16, 2019 | GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c. | ||
| CVE-2019-11222 | Hig | 0.00 | 7.8 | 0.01 | Apr 15, 2019 | gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file. | ||
| CVE-2018-20763 | Hig | 0.00 | 7.8 | 0.01 | Feb 6, 2019 | In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking. | ||
| CVE-2018-20762 | Hig | 0.00 | 7.8 | 0.01 | Feb 6, 2019 | GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames. | ||
| CVE-2018-20761 | Hig | 0.00 | 7.8 | 0.01 | Feb 6, 2019 | GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a. |
- risk 0.00cvss 5.5epss 0.01
In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to be a negative number and a heap overflow in the memcpy.
- risk 0.00cvss 5.5epss 0.01
There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal.
- risk 0.00cvss 5.5epss 0.01
There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash.
- risk 0.00cvss 7.8epss 0.01
There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.
- risk 0.00cvss 5.5epss 0.01
The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
- risk 0.00cvss 5.5epss 0.01
Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.
- risk 0.00cvss 7.8epss 0.01
Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
- risk 0.00cvss 7.8epss 0.01
Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes.
- risk 0.00cvss 9.8epss 0.02
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide when to make gf_isom_box_del calls. This leads to various use-after-free outcomes involving mdia_Read,…
- risk 0.00cvss 5.5epss 0.01
dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow.
- risk 0.00cvss 6.5epss 0.01
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
- risk 0.00cvss 7.8epss 0.01
gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file.
- risk 0.00cvss 7.8epss 0.01
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking.
- risk 0.00cvss 7.8epss 0.01
GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.
- risk 0.00cvss 7.8epss 0.01
GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a.
Page 21 of 22