Vulnerability index

Browse CVEs

353 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Gpac HIGH 7.5
CVE-2024-24267

gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.

Fix: 2.4.0+
Fix from $1,950 2024-02-05
Gpac HIGH 7.8
CVE-2024-22749

GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577

Patch available
Fix from $1,950 2024-01-25
Gpac MEDIUM 5.5
CVE-2023-50120

MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c.…

No fix yet
Fix from $1,600 2024-01-10
Gpac CRITICAL 9.8
CVE-2024-0321

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

Fix: 2.3.0-dev+
Fix from $2,300 2024-01-08
Gpac CRITICAL 9.1
CVE-2024-0322

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Fix: 2.3.0+
Fix from $2,300 2024-01-08
Gpac HIGH 7.5
CVE-2023-46929

An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows…

Patch available
Fix from $1,950 2024-01-03
Gpac CRITICAL 9.8
CVE-2023-46932

Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of…

No fix yet
Fix from $2,300 2023-12-09
Gpac MEDIUM 5.5
CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/bo…

Fix: after 2.2.1
Fix from $1,600 2023-12-09
Gpac MEDIUM 5.5
CVE-2023-48958

gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.

Patch available
Fix from $1,600 2023-12-07
Gpac MEDIUM 5.3
CVE-2023-46871

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lea…

Fix: after 2.3-dev-rev602-ged8424300-master
Fix from $1,600 2023-12-07
Gpac HIGH 7.1
CVE-2023-48090

GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329.

No fix yet
Fix from $1,950 2023-11-20
Gpac MEDIUM 5.5
CVE-2023-48039

GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75.

No fix yet
Fix from $1,600 2023-11-20
Gpac HIGH 7.8
CVE-2023-48011

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie…

Patch available
Fix from $1,950 2023-11-15
Gpac HIGH 7.8
CVE-2023-48013

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.

Patch available
Fix from $1,950 2023-11-15
Gpac HIGH 7.8
CVE-2023-48014

GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parser…

Patch available
Fix from $1,950 2023-11-15
Gpac MEDIUM 5.5
CVE-2023-47384

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. …

Mitigation only
Fix from $1,600 2023-11-14
Gpac MEDIUM 5.5
CVE-2023-46001

Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src…

Patch available
Fix from $1,600 2023-11-07
Gpac HIGH 7.5
CVE-2023-5998

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Fix: 2.3.0+
Fix from $1,950 2023-11-07
Gpac MEDIUM 5.5
CVE-2023-46927

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Bo…

Patch available
Fix from $1,600 2023-11-01
Gpac MEDIUM 5.5
CVE-2023-46928

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42.

Patch available
Fix from $1,600 2023-11-01
Gpac MEDIUM 5.5
CVE-2023-46930

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14.

Patch available
Fix from $1,600 2023-11-01
Gpac MEDIUM 5.5
CVE-2023-46931

GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4B…

Patch available
Fix from $1,600 2023-11-01
Gpac MEDIUM 5.5
CVE-2023-5595

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Fix: 2.3.0+
Fix from $1,600 2023-10-16
Gpac HIGH 7.8
CVE-2023-5586

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Fix: 2.3.0+
Fix from $1,950 2023-10-15
Gpac MEDIUM 5.5
CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bif…

Fix: after 2.2.1
Fix from $1,600 2023-10-12
Gpac HIGH 7.7
CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

Fix: 2.2.2+
Fix from $1,950 2023-10-11
Gpac HIGH 7.1
CVE-2023-5377

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.

Fix: after 2.2.1
Fix from $1,950 2023-10-04
Gpac MEDIUM 5.5
CVE-2023-41000

GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

Fix: after 2.2.1
Fix from $1,600 2023-09-11
Gpac MEDIUM 5.5
CVE-2023-4778

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Fix: 2.3-dev+
Fix from $1,600 2023-09-05
Gpac MEDIUM 5.5
CVE-2023-4758

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Fix: 2.3+
Fix from $1,600 2023-09-04