Filtered by vendor Gpac Subscriptions
Total 348 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-0760 1 Gpac 1 Gpac 2025-03-24 7.8 High
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.
CVE-2023-0817 1 Gpac 1 Gpac 2025-03-21 7.8 High
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVE-2023-0818 1 Gpac 1 Gpac 2025-03-21 5.5 Medium
Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVE-2023-0819 1 Gpac 1 Gpac 2025-03-21 7.8 High
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVE-2021-44923 1 Gpac 1 Gpac 2025-03-18 5.5 Medium
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.
CVE-2023-0866 1 Gpac 1 Gpac 2025-03-18 7.8 High
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2019-12483 2 Debian, Gpac 2 Debian Linux, Gpac 2025-03-14 7.8 High
An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, as demonstrated by MP4Box.
CVE-2019-12482 2 Debian, Gpac 2 Debian Linux, Gpac 2025-03-14 7.5 High
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, as demonstrated by MP4Box.
CVE-2019-12481 2 Debian, Gpac 2 Debian Linux, Gpac 2025-03-14 5.5 Medium
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
CVE-2021-40574 1 Gpac 1 Gpac 2025-03-05 7.8 High
The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
CVE-2021-30022 1 Gpac 1 Gpac 2025-03-05 5.5 Medium
There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.
CVE-2021-30014 1 Gpac 1 Gpac 2025-03-05 5.5 Medium
There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash.
CVE-2020-24829 1 Gpac 1 Gpac 2025-03-05 5.5 Medium
An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_section_complete in media_tools/mpegts.c that can cause a denial of service (DOS) via a crafted MP4 file.
CVE-2019-20208 2 Debian, Gpac 2 Debian Linux, Gpac 2025-03-05 5.5 Medium
dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow.
CVE-2019-20171 2 Debian, Gpac 2 Debian Linux, Gpac 2025-03-04 5.5 Medium
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
CVE-2023-1448 1 Gpac 1 Gpac 2025-02-26 5.3 Medium
A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability.
CVE-2023-1654 1 Gpac 1 Gpac 2025-02-19 7.8 High
Denial of Service in GitHub repository gpac/gpac prior to 2.4.0.
CVE-2023-1655 1 Gpac 1 Gpac 2025-02-19 7.8 High
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
CVE-2023-0841 1 Gpac 1 Gpac 2025-02-13 6.3 Medium
A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded. This issue affects the function mp3_dmx_process of the file filters/reframe_mp3.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-221087.
CVE-2024-50664 1 Gpac 1 Gpac 2025-02-11 7.8 High
gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box.