p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in gpac · Seite 20

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für gpac: 24. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 449

  1. CVE-2021-21848

    Hoch · CVSS 8.8EPSS 1,71%Keine Korrektur veröffentlicht

    CVE-2021-21848

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for atoms with the “stsz” FOURCC code when parsing atoms that use the “stz2” FOURCC code and can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  2. CVE-2021-21849

    Hoch · CVSS 8.8EPSS 1,71%Keine Korrektur veröffentlicht

    CVE-2021-21849

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the “tfra” FOURCC code due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  3. CVE-2021-21841

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21841

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  4. CVE-2021-21842

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21842

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  5. CVE-2021-21840

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21840

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  6. CVE-2021-21836

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21836

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  7. CVE-2021-21834

    Hoch · CVSS 8.8EPSS 1,71%Keine Korrektur veröffentlicht

    CVE-2021-21834

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom for the “co64” FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  8. CVE-2021-21835

    Hoch · CVSS 8.8EPSS 1,43%Keine Korrektur veröffentlicht

    CVE-2021-21835

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  9. CVE-2021-21862

    Hoch · CVSS 8.8EPSS 1,43%Keine Korrektur veröffentlicht

    CVE-2021-21862

    Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption The implementation of the parser used for the “Xtra” FOURCC code is handled. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  10. CVE-2021-21858

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21858

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  11. CVE-2021-21857

    Hoch · CVSS 8.8EPSS 1,66%Keine Korrektur veröffentlicht

    CVE-2021-21857

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  12. CVE-2021-21856

    Hoch · CVSS 8.8EPSS 1,4%Keine Korrektur veröffentlicht

    CVE-2021-21856

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  13. CVE-2021-21855

    Hoch · CVSS 8.8EPSS 1,66%Keine Korrektur veröffentlicht

    CVE-2021-21855

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  14. CVE-2021-21854

    Hoch · CVSS 8.8EPSS 1,67%Keine Korrektur veröffentlicht

    CVE-2021-21854

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  15. CVE-2021-21853

    Hoch · CVSS 8.8EPSS 1,7%Keine Korrektur veröffentlicht

    CVE-2021-21853

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  16. CVE-2021-21839

    Hoch · CVSS 8.8EPSS 2,01%Keine Korrektur veröffentlicht

    CVE-2021-21839

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  17. CVE-2021-21838

    Hoch · CVSS 8.8EPSS 2,01%Keine Korrektur veröffentlicht

    CVE-2021-21838

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  18. CVE-2021-21837

    Hoch · CVSS 8.8EPSS 2,01%Keine Korrektur veröffentlicht

    CVE-2021-21837

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  19. CVE-2021-21844

    Hoch · CVSS 8.8EPSS 1,96%Keine Korrektur veröffentlicht

    CVE-2021-21844

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Veröffentlicht Aktualisiert
  20. CVE-2021-21843

    Hoch · CVSS 8.8EPSS 2,01%Keine Korrektur veröffentlicht

    CVE-2021-21843

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. After validating the number of ranges, at [41] the library will multiply the count by the size of the GF_SubsegmentRangeInfo structure. On a 32-bit platform, this multiplication can result in an integer overflow causing the space of the array being allocated to be less than expected. An attacker can convince a user to open a vi

    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →