Vendor CVEs
Gpac
All CVEs
430 total · sorted by risk| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-40944 | Med | 0.36 | 5.5 | 0.01 | Jun 28, 2022 | In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC. This can cause a denial of service (DOS). | ||
| CVE-2021-40609 | Med | 0.36 | 5.5 | 0.01 | Jun 28, 2022 | The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. | ||
| CVE-2021-40608 | Med | 0.36 | 5.5 | 0.01 | Jun 28, 2022 | The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. | ||
| CVE-2021-40607 | Med | 0.36 | 5.5 | 0.01 | Jun 28, 2022 | The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. | ||
| CVE-2021-40606 | Med | 0.36 | 5.5 | 0.01 | Jun 28, 2022 | The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. | ||
| CVE-2021-40942 | Med | 0.36 | 5.5 | 0.01 | Jun 27, 2022 | In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC. This can cause a denial of service (DOS). | ||
| CVE-2021-41458 | Med | 0.36 | 5.5 | 0.01 | Jun 16, 2022 | In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability. | ||
| CVE-2022-29537 | Med | 0.36 | 5.5 | 0.01 | Apr 20, 2022 | gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box. | ||
| CVE-2022-27148 | Med | 0.36 | 5.5 | 0.01 | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow. | ||
| CVE-2022-27147 | Med | 0.36 | 5.5 | 0.01 | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag. | ||
| CVE-2022-27146 | Med | 0.36 | 5.5 | 0.01 | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag. | ||
| CVE-2022-27145 | Med | 0.36 | 5.5 | 0.01 | Apr 8, 2022 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box. | ||
| CVE-2022-24576 | Med | 0.36 | 5.5 | 0.01 | Mar 14, 2022 | GPAC 1.0.1 is affected by Use After Free through MP4Box. | ||
| CVE-2022-24574 | Med | 0.36 | 5.5 | 0.01 | Mar 14, 2022 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra (). | ||
| CVE-2022-24249 | Med | 0.36 | 5.5 | 0.01 | Feb 4, 2022 | A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871. | ||
| CVE-2021-46313 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46311 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46240 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46239 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46238 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS). | ||
| CVE-2021-46237 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46236 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-46234 | Med | 0.36 | 5.5 | 0.01 | Jan 21, 2022 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-45767 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2022 | GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-45764 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). | ||
| CVE-2021-45763 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to a Denial of Service (DoS). | ||
| CVE-2021-45762 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS). | ||
| CVE-2021-45760 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2022 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Denial of Service (DoS). | ||
| CVE-2021-40559 | Med | 0.36 | 5.5 | 0.01 | Jan 12, 2022 | A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service. | ||
| CVE-2021-46051 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. . | ||
| CVE-2021-46049 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service. | ||
| CVE-2021-46047 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function. | ||
| CVE-2021-46046 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent). | ||
| CVE-2021-46045 | Med | 0.36 | 5.5 | 0.01 | Jan 10, 2022 | GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent). | ||
| CVE-2021-46044 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent). | ||
| CVE-2021-46043 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service. | ||
| CVE-2021-46042 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service. | ||
| CVE-2021-46041 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service. | ||
| CVE-2021-46040 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent). | ||
| CVE-2021-46039 | Med | 0.36 | 5.5 | 0.01 | Jan 6, 2022 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent). | ||
| CVE-2021-46038 | Med | 0.36 | 5.5 | 0.01 | Jan 5, 2022 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent). | ||
| CVE-2021-45831 | Med | 0.36 | 5.5 | 0.01 | Jan 5, 2022 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service. | ||
| CVE-2021-45267 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash. | ||
| CVE-2021-45263 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash. | ||
| CVE-2021-45262 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash. | ||
| CVE-2021-45260 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash. | ||
| CVE-2021-45259 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash. | ||
| CVE-2021-45258 | Med | 0.36 | 5.5 | 0.01 | Dec 22, 2021 | A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash. | ||
| CVE-2021-44927 | Med | 0.36 | 5.5 | 0.01 | Dec 21, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash. | ||
| CVE-2021-44926 | Med | 0.36 | 5.5 | 0.01 | Dec 21, 2021 | A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash. |
- risk 0.36cvss 5.5epss 0.01
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC. This can cause a denial of service (DOS).
- risk 0.36cvss 5.5epss 0.01
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
- risk 0.36cvss 5.5epss 0.01
The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
- risk 0.36cvss 5.5epss 0.01
The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
- risk 0.36cvss 5.5epss 0.01
The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
- risk 0.36cvss 5.5epss 0.01
In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC. This can cause a denial of service (DOS).
- risk 0.36cvss 5.5epss 0.01
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability.
- risk 0.36cvss 5.5epss 0.01
gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.
- risk 0.36cvss 5.5epss 0.01
GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow.
- risk 0.36cvss 5.5epss 0.01
GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag.
- risk 0.36cvss 5.5epss 0.01
GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag.
- risk 0.36cvss 5.5epss 0.01
GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box.
- risk 0.36cvss 5.5epss 0.01
GPAC 1.0.1 is affected by Use After Free through MP4Box.
- risk 0.36cvss 5.5epss 0.01
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().
- risk 0.36cvss 5.5epss 0.01
A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.
- risk 0.36cvss 5.5epss 0.01
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra().
- risk 0.36cvss 5.5epss 0.01
GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Denial of Service (DoS).
- risk 0.36cvss 5.5epss 0.01
A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service.
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.
- risk 0.36cvss 5.5epss 0.01
A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).
- risk 0.36cvss 5.5epss 0.01
GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent).
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service.
- risk 0.36cvss 5.5epss 0.01
A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service.
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent).
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent).
- risk 0.36cvss 5.5epss 0.01
A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).
- risk 0.36cvss 5.5epss 0.01
A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.
- risk 0.36cvss 5.5epss 0.01
An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.
- risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.
Page 4 of 9