Gpac
Page 4 of 5 — Gpac CVEs from a corpus of 405, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-32135 | Medium | 5.5 | 2021-09-13 | The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32132 | Medium | 5.5 | 2021-09-13 | The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32137 | Medium | 5.5 | 2021-09-13 | Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a… |
CVE-2021-32134 | Medium | 5.5 | 2021-09-13 | The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-32136 | High | 7.8 | 2021-09-13 | Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted f… |
CVE-2020-19751 | Critical | 9.1 | 2021-09-07 | An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read. |
CVE-2020-19750 | High | 7.5 | 2021-09-07 | An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read. |
CVE-2021-21850 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21849 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21848 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The libra… |
CVE-2021-21842 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21841 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21840 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21836 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21835 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21834 | High | 8.8 | 2021-08-25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A special… |
CVE-2021-21862 | High | 8.8 | 2021-08-18 | Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1… |
CVE-2021-21858 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21857 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21856 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21855 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21854 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21853 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21852 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21851 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21847 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21846 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21845 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21844 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21843 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21839 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21838 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21837 | High | 8.8 | 2021-08-18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A… |
CVE-2021-21861 | High | 8.8 | 2021-08-16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. When pr… |
CVE-2021-21860 | High | 8.8 | 2021-08-16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A speci… |
CVE-2021-21859 | High | 8.8 | 2021-08-16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The str… |
CVE-2021-32440 | Medium | 5.5 | 2021-08-11 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comma… |
CVE-2021-32439 | High | 7.8 | 2021-08-11 | Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted f… |
CVE-2021-32438 | Medium | 5.5 | 2021-08-11 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box co… |
CVE-2021-32437 | Medium | 5.5 | 2021-08-11 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-36584 | Medium | 5.5 | 2021-08-05 | An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonst… |
CVE-2020-24829 | Medium | 5.5 | 2021-08-04 | An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media… |
CVE-2020-22352 | Medium | 5.5 | 2021-08-04 | The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4B… |
CVE-2020-19488 | Medium | 5.5 | 2021-07-21 | An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_ite… |
CVE-2020-19481 | Medium | 5.5 | 2021-07-21 | An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid memory read in gf_m2ts_process_pmt in media_tools/mpegts.c that… |
CVE-2020-23932 | Medium | 5.5 | 2021-04-21 | An issue was discovered in gpac before 1.0.1. A NULL pointer dereference exists in the function dump_isom_sdp located in filedump.c. It allows an attacker to c… |
CVE-2020-23931 | High | 7.1 | 2021-04-21 | An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. |
CVE-2020-23930 | Medium | 5.5 | 2021-04-21 | An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function nhmldump_send_header located in write_nhml.c. It allows an… |
CVE-2020-23928 | High | 7.1 | 2021-04-21 | An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. |
CVE-2020-35982 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function gf_hinter_track_finalize() in media_tools/isom… |
CVE-2020-35981 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is an invalid pointer dereference in the function SetupWriters() in isomedia/isom_store.c. |
CVE-2020-35980 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is a use-after-free in the function gf_isom_box_del() in isomedia/box_funcs.c. |
CVE-2020-35979 | High | 7.8 | 2021-04-21 | An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gp_rtp_builder_do_avc() in ietf/rtp_pck_mpeg4.c. |
CVE-2021-30199 | Medium | 5.5 | 2021-04-19 | In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The first arg pck may be null with a crafte… |
CVE-2021-30022 | Medium | 5.5 | 2021-04-19 | There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it… |
CVE-2021-30020 | Medium | 5.5 | 2021-04-19 | In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns… |
CVE-2021-30019 | Medium | 5.5 | 2021-04-19 | In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, re… |
CVE-2021-30015 | Medium | 5.5 | 2021-04-19 | There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_par… |
CVE-2021-30014 | Medium | 5.5 | 2021-04-19 | There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash. |
CVE-2021-29279 | High | 7.8 | 2021-04-19 | There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe v… |
CVE-2021-31262 | Medium | 5.5 | 2021-04-19 | The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box comman… |
CVE-2021-31261 | Medium | 5.5 | 2021-04-19 | The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command. |
CVE-2021-31260 | Medium | 5.5 | 2021-04-19 | The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-31259 | Medium | 5.5 | 2021-04-19 | The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file i… |
CVE-2021-31258 | Medium | 5.5 | 2021-04-19 | The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box… |
CVE-2021-31257 | Medium | 5.5 | 2021-04-19 | The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. |
CVE-2021-31256 | Medium | 5.5 | 2021-04-19 | Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. |
CVE-2021-31255 | High | 7.8 | 2021-04-19 | Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted fil… |
CVE-2021-31254 | High | 7.8 | 2021-04-19 | Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted fil… |
CVE-2021-28300 | Critical | 9.8 | 2021-04-14 | NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial… |
CVE-2020-11558 | Critical | 9.8 | 2020-04-05 | An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide whe… |
CVE-2019-20632 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in… |
CVE-2019-20631 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list… |
CVE-2019-20630 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_… |
CVE-2019-20629 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gf_m2ts_process_pmt in media… |
CVE-2019-20628 | Medium | 5.5 | 2020-03-24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in medi… |
CVE-2020-6631 | Medium | 5.5 | 2020-01-09 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_process_pmt() in media_tools/m2ts_mux.c. |
CVE-2020-6630 | Medium | 5.5 | 2020-01-09 | An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_data_size() in isomedia/isom_read.c. |
CVE-2019-20208 | Medium | 5.5 | 2020-01-02 | dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow. |
CVE-2019-20171 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in i… |
CVE-2019-20170 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in… |
CVE-2019-20169 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. |
CVE-2019-20168 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_f… |
CVE-2019-20167 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_… |
CVE-2019-20166 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/bo… |
CVE-2019-20165 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/… |
CVE-2019-20164 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia… |
CVE-2019-20163 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in… |
CVE-2019-20162 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in iso… |
CVE-2019-20161 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit… |
CVE-2019-20160 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in… |
CVE-2019-20159 | Medium | 5.5 | 2019-12-31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c. |
CVE-2018-21017 | Medium | 6.5 | 2019-09-16 | GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c. |
CVE-2018-21016 | Medium | 6.5 | 2019-09-16 | audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and app… |
CVE-2018-21015 | Medium | 6.5 | 2019-09-16 | AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… |
CVE-2019-13618 | High | 7.5 | 2019-07-16 | In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c. |
CVE-2019-12483 | High | 7.8 | 2019-05-30 | An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in… |
CVE-2019-12482 | High | 7.5 | 2019-05-30 | An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac… |
CVE-2019-12481 | Medium | 5.5 | 2019-05-30 | An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box. |
CVE-2019-11222 | High | 7.8 | 2019-04-15 | gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file. |