p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de ccextractor

Vulnérabilité publiée pour ccextractor au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 25

  1. CVE-2026-2889

    Moyenne · CVSS 4.8EPSS 0,14%Aucun correctif publié

    CCExtractor mp4.c processmp4 use after free

    A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx/mp4.c. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 0.96.6 is able to address this issue. The patch is named fd7271bae238ccb3ae8a71304ea64f0886324925. You should upgrade the affected component.

    Publication Mise à jour
  2. CVE-2026-2245

    Moyenne · CVSS 4.8EPSS 0,15%Aucun correctif publié

    CCExtractor MPEG-TS File ts_tables.c parse_PMT out-of-bounds

    A vulnerability was identified in CCExtractor up to 183. This affects the function parse_PAT/parse_PMT in the library src/lib_ccx/ts_tables.c of the component MPEG-TS File Parser. Such manipulation leads to out-of-bounds read. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The name of the patch is fd7271bae238ccb3ae8a71304ea64f0886324925. It is best practice to apply a patch to resolve this issue.

    Publication Mise à jour
  3. CVE-2021-21852

    Élevée · CVSS 8.8EPSS 1,99%Aucun correctif publié

    CVE-2021-21852

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →