Gpac
Page 2 of 5 — Gpac CVEs from a corpus of 405, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4721 | Medium | 5.5 | 2023-09-01 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4720 | Medium | 5.5 | 2023-09-01 | Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4683 | Medium | 5.5 | 2023-08-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4682 | Medium | 5.5 | 2023-08-31 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4681 | Medium | 5.5 | 2023-08-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4678 | Medium | 5.5 | 2023-08-31 | Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-39562 | Medium | 5.5 | 2023-08-28 | GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows a… |
CVE-2023-37767 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so. |
CVE-2023-37766 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. |
CVE-2023-37765 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. |
CVE-2023-37174 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c. |
CVE-2023-3523 | High | 7.1 | 2023-07-06 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-3291 | Low | 3.3 | 2023-06-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-3013 | High | 7.1 | 2023-05-31 | Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-3012 | High | 7.8 | 2023-05-31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2840 | Critical | 9.8 | 2023-05-22 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2839 | High | 7.5 | 2023-05-22 | Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2838 | Critical | 9.1 | 2023-05-22 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-2837 | Medium | 5.5 | 2023-05-22 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-1654 | High | 7.8 | 2023-03-27 | Denial of Service in GitHub repository gpac/gpac prior to 2.4.0. |
CVE-2023-1655 | High | 7.8 | 2023-03-27 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0. |
CVE-2023-1452 | Medium | 5.3 | 2023-03-17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-1449 | Medium | 5.3 | 2023-03-17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_stat… |
CVE-2023-1448 | Medium | 5.3 | 2023-03-17 | A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the f… |
CVE-2023-0866 | High | 7.8 | 2023-02-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2023-0841 | Medium | 6.3 | 2023-02-15 | A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file… |
CVE-2023-0819 | High | 7.8 | 2023-02-13 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2023-0818 | Medium | 5.5 | 2023-02-13 | Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2023-0817 | High | 7.8 | 2023-02-13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. |
CVE-2023-0770 | High | 7.8 | 2023-02-09 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2. |
CVE-2023-0760 | High | 7.8 | 2023-02-09 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV. |
CVE-2023-23145 | High | 7.8 | 2023-01-20 | GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function. |
CVE-2023-23144 | Medium | 5.5 | 2023-01-20 | Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master. |
CVE-2023-23143 | High | 7.8 | 2023-01-20 | Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master. |
CVE-2023-0358 | High | 7.8 | 2023-01-18 | Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2022-47663 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 |
CVE-2022-47662 | Medium | 5.5 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:662 |
CVE-2022-47661 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes |
CVE-2022-47660 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c |
CVE-2022-47659 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data |
CVE-2022-47658 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039 |
CVE-2022-47657 | High | 7.8 | 2023-01-05 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662 |
CVE-2022-47656 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273 |
CVE-2022-47654 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261 |
CVE-2022-47653 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113 |
CVE-2022-47095 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c |
CVE-2022-47094 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid |
CVE-2022-47093 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid |
CVE-2022-47092 | High | 7.1 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8316 |
CVE-2022-47091 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c |
CVE-2022-47089 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c |
CVE-2022-47088 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow. |
CVE-2022-47087 | High | 7.8 | 2023-01-05 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c |
CVE-2022-47086 | Medium | 5.5 | 2023-01-05 | GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c |
CVE-2022-46490 | Medium | 5.5 | 2023-01-05 | GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c. |
CVE-2022-46489 | Medium | 5.5 | 2023-01-05 | GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c. |
CVE-2022-45283 | High | 7.8 | 2022-12-06 | GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c. |
CVE-2022-45343 | High | 7.8 | 2022-11-29 | GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c. |
CVE-2022-4202 | Medium | 6.3 | 2022-11-29 | A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the… |
CVE-2022-45204 | Medium | 5.5 | 2022-11-29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c. |
CVE-2022-45202 | High | 7.8 | 2022-11-29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c. |
CVE-2022-3957 | Medium | 4.3 | 2022-11-11 | A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegrap… |
CVE-2022-43255 | Medium | 5.5 | 2022-11-02 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c. |
CVE-2022-43254 | Medium | 5.5 | 2022-11-02 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c. |
CVE-2022-43045 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c. |
CVE-2022-43044 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at /isomedia/meta.c. |
CVE-2022-43043 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at /bifs/field_decode.c. |
CVE-2022-43042 | High | 7.8 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c. |
CVE-2022-43040 | High | 7.8 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c. |
CVE-2022-43039 | Medium | 5.5 | 2022-10-19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref at /isomedia/meta.c. |
CVE-2022-3222 | Medium | 5.5 | 2022-09-15 | Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-3178 | High | 7.8 | 2022-09-12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-38530 | High | 7.8 | 2022-09-06 | GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD. |
CVE-2022-36191 | Medium | 5.5 | 2022-08-17 | A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in… |
CVE-2022-36190 | Critical | 9.8 | 2022-08-17 | GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242. |
CVE-2022-36186 | High | 7.5 | 2022-08-17 | A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid… |
CVE-2022-2549 | Medium | 5.5 | 2022-07-27 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV. |
CVE-2022-2454 | High | 7.8 | 2022-07-19 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV. |
CVE-2022-2453 | High | 7.8 | 2022-07-19 | Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV. |
CVE-2021-40944 | Medium | 5.5 | 2022-06-28 | In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated… |
CVE-2021-40609 | Medium | 5.5 | 2022-06-28 | The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2021-40608 | Medium | 5.5 | 2022-06-28 | The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2021-40607 | Medium | 5.5 | 2022-06-28 | The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2021-40606 | Medium | 5.5 | 2022-06-28 | The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command. |
CVE-2021-40942 | Medium | 5.5 | 2022-06-27 | In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC. Th… |
CVE-2021-41458 | Medium | 5.5 | 2022-06-16 | In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability. |
CVE-2021-40592 | Medium | 5.5 | 2022-06-08 | GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vu… |
CVE-2022-1795 | Critical | 9.8 | 2022-05-18 | Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV. |
CVE-2022-30976 | High | 7.1 | 2022-05-18 | GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated… |
CVE-2022-29340 | High | 7.5 | 2022-05-05 | GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of… |
CVE-2022-29339 | High | 7.5 | 2022-05-05 | In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability… |
CVE-2022-1441 | High | 7.8 | 2022-04-25 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `di… |
CVE-2022-29537 | Medium | 5.5 | 2022-04-20 | gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box. |
CVE-2022-27148 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow. |
CVE-2022-27147 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag. |
CVE-2022-27146 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag. |
CVE-2022-27145 | Medium | 5.5 | 2022-04-08 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box. |
CVE-2022-1222 | Medium | 5.5 | 2022-04-04 | Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-1172 | Medium | 5.0 | 2022-03-30 | Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. |
CVE-2022-1035 | Medium | 5.5 | 2022-03-21 | Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV. |