p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de ccextractor

Vulnerabilidades publicadas para ccextractor en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 10

  1. CVE-2026-2889

    Media · CVSS 4.8EPSS 0,14%Sin corrección publicada

    CCExtractor mp4.c processmp4 use after free

    A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx/mp4.c. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 0.96.6 is able to address this issue. The patch is named fd7271bae238ccb3ae8a71304ea64f0886324925. You should upgrade the affected component.

    Publicación Actualización
  2. CVE-2026-2245

    Media · CVSS 4.8EPSS 0,15%Sin corrección publicada

    CCExtractor MPEG-TS File ts_tables.c parse_PMT out-of-bounds

    A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The name of the patch is fd7271bae238ccb3ae8a71304ea64f0886324925. It is best practice to apply a patch to resolve this issue.

    Publicación Actualización
  3. CVE-2020-11558

    Crítica · CVSS 9.8EPSS 1,54%Sin corrección publicada

    CVE-2020-11558

    An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box. audio_sample_entry_Read in isomedia/box_code_base.c does not properly decide when to make gf_isom_box_del calls. This leads to various use-after-free outcomes involving mdia_Read, gf_isom_delete_movie, and gf_isom_parse_movie_boxes.

    Publicación Actualización
  4. CVE-2018-21015

    Media · CVSS 6.5EPSS 1,38%Sin corrección publicada

    CVE-2018-21015

    AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.

    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →