p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de gpac · Page n° 20

Vulnérabilités publiées pour gpac au cours des 30 derniers jours : 24. Présentes dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 449

  1. CVE-2021-21848

    Élevée · CVSS 8.8EPSS 1,71%Aucun correctif publié

    CVE-2021-21848

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for atoms with the “stsz” FOURCC code when parsing atoms that use the “stz2” FOURCC code and can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  2. CVE-2021-21849

    Élevée · CVSS 8.8EPSS 1,71%Aucun correctif publié

    CVE-2021-21849

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the “tfra” FOURCC code due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  3. CVE-2021-21841

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21841

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  4. CVE-2021-21842

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21842

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  5. CVE-2021-21840

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21840

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  6. CVE-2021-21836

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21836

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  7. CVE-2021-21834

    Élevée · CVSS 8.8EPSS 1,71%Aucun correctif publié

    CVE-2021-21834

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom for the “co64” FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  8. CVE-2021-21835

    Élevée · CVSS 8.8EPSS 1,43%Aucun correctif publié

    CVE-2021-21835

    An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  9. CVE-2021-21862

    Élevée · CVSS 8.8EPSS 1,43%Aucun correctif publié

    CVE-2021-21862

    Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption The implementation of the parser used for the “Xtra” FOURCC code is handled. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  10. CVE-2021-21858

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21858

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  11. CVE-2021-21857

    Élevée · CVSS 8.8EPSS 1,66%Aucun correctif publié

    CVE-2021-21857

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  12. CVE-2021-21856

    Élevée · CVSS 8.8EPSS 1,4%Aucun correctif publié

    CVE-2021-21856

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  13. CVE-2021-21855

    Élevée · CVSS 8.8EPSS 1,66%Aucun correctif publié

    CVE-2021-21855

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  14. CVE-2021-21854

    Élevée · CVSS 8.8EPSS 1,67%Aucun correctif publié

    CVE-2021-21854

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  15. CVE-2021-21853

    Élevée · CVSS 8.8EPSS 1,7%Aucun correctif publié

    CVE-2021-21853

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  16. CVE-2021-21839

    Élevée · CVSS 8.8EPSS 2,01%Aucun correctif publié

    CVE-2021-21839

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  17. CVE-2021-21838

    Élevée · CVSS 8.8EPSS 2,01%Aucun correctif publié

    CVE-2021-21838

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  18. CVE-2021-21837

    Élevée · CVSS 8.8EPSS 2,01%Aucun correctif publié

    CVE-2021-21837

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  19. CVE-2021-21844

    Élevée · CVSS 8.8EPSS 1,96%Aucun correctif publié

    CVE-2021-21844

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

    Publication Mise à jour
  20. CVE-2021-21843

    Élevée · CVSS 8.8EPSS 2,01%Aucun correctif publié

    CVE-2021-21843

    Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. After validating the number of ranges, at [41] the library will multiply the count by the size of the GF_SubsegmentRangeInfo structure. On a 32-bit platform, this multiplication can result in an integer overflow causing the space of the array being allocated to be less than expected. An attacker can convince a user to open a vi

    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →