Browse CVEs

HIGH 7.5 CVE-2024-24267 gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function. Gpac 2.4.0+ Fix from $1,9502024-02-05 HIGH 7.8 CVE-2024-22749 GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577 Gpac Patch available Fix from $1,9502024-01-25 MEDIUM 5.5 CVE-2023-50120 MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c.… Gpac No fix yet Fix from $1,6002024-01-10 CRITICAL 9.8 CVE-2024-0321 Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3.0-dev+ Fix from $2,3002024-01-08 CRITICAL 9.1 CVE-2024-0322 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3.0+ Fix from $2,3002024-01-08 HIGH 7.5 CVE-2023-46929 An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows… Gpac Patch available Fix from $1,9502024-01-03 CRITICAL 9.8 CVE-2023-46932 Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of… Gpac No fix yet Fix from $2,3002023-12-09 MEDIUM 5.5 CVE-2023-47465 An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/bo… Gpac after 2.2.1 Fix from $1,6002023-12-09 MEDIUM 5.5 CVE-2023-48958 gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589. Gpac Patch available Fix from $1,6002023-12-07 MEDIUM 5.3 CVE-2023-46871 GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lea… Gpac after 2.3-dev-rev602-ged8424300-master Fix from $1,6002023-12-07 HIGH 7.1 CVE-2023-48090 GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329. Gpac No fix yet Fix from $1,9502023-11-20 MEDIUM 5.5 CVE-2023-48039 GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75. Gpac No fix yet Fix from $1,6002023-11-20 HIGH 7.8 CVE-2023-48011 GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie… Gpac Patch available Fix from $1,9502023-11-15 HIGH 7.8 CVE-2023-48013 GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c. Gpac Patch available Fix from $1,9502023-11-15 HIGH 7.8 CVE-2023-48014 GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parser… Gpac Patch available Fix from $1,9502023-11-15 MEDIUM 5.5 CVE-2023-47384 MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. … Gpac Mitigation only Fix from $1,6002023-11-14 MEDIUM 5.5 CVE-2023-46001 Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src… Gpac Patch available Fix from $1,6002023-11-07 HIGH 7.5 CVE-2023-5998 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV. Gpac 2.3.0+ Fix from $1,9502023-11-07 MEDIUM 5.5 CVE-2023-46927 GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Bo… Gpac Patch available Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2023-46928 GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42. Gpac Patch available Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2023-46930 GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14. Gpac Patch available Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2023-46931 GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4B… Gpac Patch available Fix from $1,6002023-11-01 MEDIUM 5.5 CVE-2023-5595 Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV. Gpac 2.3.0+ Fix from $1,6002023-10-16 HIGH 7.8 CVE-2023-5586 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. Gpac 2.3.0+ Fix from $1,9502023-10-15 MEDIUM 5.5 CVE-2023-42298 An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bif… Gpac after 2.2.1 Fix from $1,6002023-10-12 HIGH 7.7 CVE-2023-5520 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. Gpac 2.2.2+ Fix from $1,9502023-10-11 HIGH 7.1 CVE-2023-5377 Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV. Gpac after 2.2.1 Fix from $1,9502023-10-04 MEDIUM 5.5 CVE-2023-41000 GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c. Gpac after 2.2.1 Fix from $1,6002023-09-11 MEDIUM 5.5 CVE-2023-4778 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3-dev+ Fix from $1,6002023-09-05 MEDIUM 5.5 CVE-2023-4758 Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3+ Fix from $1,6002023-09-04