Gpac vulnerabilities, page 4
405 vulnerabilities
Known vulnerabilities in Gpac products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
CVE-2021-41458debiangpac+2
EPSS score0.60%
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability.CVE-2021-41457debiangpac+2EPSS score1.21%
There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability.CVE-2021-41459debiangpac+2EPSS score1.25%
There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability.CVE-2021-31258debianccextractor+3EPSS score0.87%
The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.CVE-2021-31254ubuntugpac+1EPSS score1.47%
Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes.CVE-2021-31255debiangpac+2EPSS score1.47%
Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.CVE-2021-31259ubuntugpac+1EPSS score0.90%
The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.CVE-2021-31260debianccextractor+3EPSS score0.87%
The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.CVE-2021-31256debiangpac+2EPSS score1.06%
Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.CVE-2021-31257debiangpac+2EPSS score0.87%
The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.CVE-2021-31262debiangpac+2EPSS score0.88%
The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.CVE-2021-31261debiangpac+2EPSS score1.07%
The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.CVE-2021-36414debiangpac+2EPSS score1.14%
A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.CVE-2021-36412debiangpac+2EPSS score0.85%
A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,CVE-2021-36584debiangpac+2EPSS score0.76%
An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).CVE-2021-36417debiangpac+2EPSS score1.13%
A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.CVE-2021-4043debiangpac+4EPSS score4.61%
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.CVE-2021-29279debiangpac+2EPSS score0.98%
There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.CVE-2021-46313debiangpac+2EPSS score0.61%
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).CVE-2021-46044debiangpac+2EPSS score0.63%
A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent).