Gpac
Page 3 of 5 — Gpac CVEs from a corpus of 405, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24578 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c. |
CVE-2022-24577 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.) |
CVE-2022-24576 | Medium | 5.5 | 2022-03-14 | GPAC 1.0.1 is affected by Use After Free through MP4Box. |
CVE-2022-24575 | High | 7.8 | 2022-03-14 | GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box. |
CVE-2022-24574 | Medium | 5.5 | 2022-03-14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra (). |
CVE-2022-26967 | High | 7.8 | 2022-03-12 | GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box. |
CVE-2021-4043 | Medium | 5.5 | 2022-02-04 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. |
CVE-2022-24249 | Medium | 5.5 | 2022-02-04 | A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulne… |
CVE-2021-46313 | Medium | 5.5 | 2022-01-21 | The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead t… |
CVE-2021-46311 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead… |
CVE-2021-46240 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can l… |
CVE-2021-46239 | Medium | 5.5 | 2022-01-21 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can l… |
CVE-2021-46238 | Medium | 5.5 | 2022-01-21 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a p… |
CVE-2021-46237 | Medium | 5.5 | 2022-01-21 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability… |
CVE-2021-46236 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability… |
CVE-2021-46234 | Medium | 5.5 | 2022-01-21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can l… |
CVE-2021-45767 | Medium | 5.5 | 2022-01-14 | GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (… |
CVE-2021-45764 | Medium | 5.5 | 2022-01-14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). |
CVE-2021-45763 | Medium | 5.5 | 2022-01-14 | GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to a Denial of Service (DoS). |
CVE-2021-45762 | Medium | 5.5 | 2022-01-14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to caus… |
CVE-2021-45760 | Medium | 5.5 | 2022-01-14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Den… |
CVE-2021-40576 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to… |
CVE-2021-40575 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to c… |
CVE-2021-40574 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attack… |
CVE-2021-40573 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service. |
CVE-2021-40572 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service. |
CVE-2021-40571 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of… |
CVE-2021-40570 | High | 7.8 | 2022-01-13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of se… |
CVE-2021-40569 | Medium | 5.5 | 2022-01-13 | The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a de… |
CVE-2021-40568 | High | 7.8 | 2022-01-13 | A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which allows attackers t… |
CVE-2021-40567 | Medium | 5.5 | 2022-01-13 | Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box, which causes a denia… |
CVE-2021-40566 | Medium | 5.5 | 2022-01-12 | A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using… |
CVE-2021-40565 | Medium | 5.5 | 2022-01-12 | A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when us… |
CVE-2021-40564 | Medium | 5.5 | 2022-01-12 | A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using m… |
CVE-2021-40563 | Medium | 5.5 | 2022-01-12 | A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu… |
CVE-2021-40562 | Medium | 5.5 | 2022-01-12 | A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nal… |
CVE-2021-40559 | Medium | 5.5 | 2022-01-12 | A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service. |
CVE-2021-36417 | High | 7.8 | 2022-01-12 | A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute… |
CVE-2021-36414 | High | 7.8 | 2022-01-10 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary… |
CVE-2021-36412 | High | 7.8 | 2022-01-10 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly h… |
CVE-2020-25427 | Medium | 5.5 | 2022-01-10 | A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a de… |
CVE-2021-46051 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. . |
CVE-2021-46049 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service. |
CVE-2021-46047 | Medium | 5.5 | 2022-01-10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function. |
CVE-2021-46046 | Medium | 5.5 | 2022-01-10 | A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent). |
CVE-2021-46045 | Medium | 5.5 | 2022-01-10 | GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent). |
CVE-2021-46044 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent). |
CVE-2021-46043 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service. |
CVE-2021-46042 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service. |
CVE-2021-46041 | Medium | 5.5 | 2022-01-06 | A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service. |
CVE-2021-46040 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent). |
CVE-2021-46039 | Medium | 5.5 | 2022-01-06 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent). |
CVE-2021-46038 | Medium | 5.5 | 2022-01-05 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent). |
CVE-2021-45831 | Medium | 5.5 | 2022-01-05 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service. |
CVE-2021-45267 | Medium | 5.5 | 2021-12-22 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application cra… |
CVE-2021-45266 | High | 7.5 | 2021-12-22 | A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash. |
CVE-2021-45263 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash. |
CVE-2021-45262 | Medium | 5.5 | 2021-12-22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash. |
CVE-2021-45260 | Medium | 5.5 | 2021-12-22 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash. |
CVE-2021-45259 | Medium | 5.5 | 2021-12-22 | An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash. |
CVE-2021-45258 | Medium | 5.5 | 2021-12-22 | A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash. |
CVE-2021-44927 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash. |
CVE-2021-44926 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash. |
CVE-2021-44925 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application cras… |
CVE-2021-44924 | Medium | 5.5 | 2021-12-21 | An infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial of Service. |
CVE-2021-44923 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application cr… |
CVE-2021-44922 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash. |
CVE-2021-44921 | Medium | 5.5 | 2021-12-21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and applica… |
CVE-2021-44920 | Medium | 5.5 | 2021-12-21 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application… |
CVE-2021-44919 | Medium | 5.5 | 2021-12-21 | A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash. |
CVE-2021-44918 | Medium | 5.5 | 2021-12-21 | A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash. |
CVE-2021-45297 | Medium | 5.5 | 2021-12-21 | An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size. |
CVE-2021-45292 | Medium | 5.5 | 2021-12-21 | The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the M… |
CVE-2021-45291 | Medium | 5.5 | 2021-12-21 | The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4… |
CVE-2021-45289 | Medium | 5.5 | 2021-12-21 | A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with si… |
CVE-2021-45288 | Medium | 5.5 | 2021-12-21 | A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command. |
CVE-2020-22679 | Medium | 5.5 | 2021-10-12 | Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. |
CVE-2020-22678 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a d… |
CVE-2020-22677 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) vi… |
CVE-2020-22675 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via… |
CVE-2020-22674 | Medium | 5.5 | 2021-10-12 | An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to caus… |
CVE-2020-22673 | Medium | 5.5 | 2021-10-12 | Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input. |
CVE-2021-41459 | High | 7.5 | 2021-10-01 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a den… |
CVE-2021-41457 | High | 7.5 | 2021-10-01 | There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability. |
CVE-2021-41456 | High | 7.5 | 2021-10-01 | There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denia… |
CVE-2020-23269 | Medium | 5.5 | 2021-09-22 | An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of s… |
CVE-2020-23267 | High | 7.1 | 2021-09-22 | An issue was discovered in gpac 0.8.0. The gf_hinter_track_process function in isom_hinter_track_process.c has a heap-based buffer overflow which can lead to a… |
CVE-2020-23266 | Medium | 5.5 | 2021-09-22 | An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS… |
CVE-2021-32271 | High | 7.8 | 2021-09-20 | An issue was discovered in gpac through 20200801. A stack-buffer-overflow exists in the function DumpRawUIConfig located in odf_dump.c. It allows an attacker t… |
CVE-2021-32270 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attac… |
CVE-2021-32269 | Medium | 5.5 | 2021-09-20 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an atta… |
CVE-2021-32268 | High | 7.8 | 2021-09-20 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code. The fixed version is 1.0.1. |
CVE-2021-33365 | Medium | 5.5 | 2021-09-13 | Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33363 | Medium | 5.5 | 2021-09-13 | Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33361 | Medium | 5.5 | 2021-09-13 | Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-32139 | Medium | 5.5 | 2021-09-13 | The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comm… |
CVE-2021-32138 | Medium | 5.5 | 2021-09-13 | The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-33366 | Medium | 5.5 | 2021-09-13 | Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33364 | Medium | 5.5 | 2021-09-13 | Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-33362 | High | 7.8 | 2021-09-13 | Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code… |