CVE-2019-20170
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.
- Update to 1.0.1+dfsg1-2
Published Updated
PatchFirst · Latest vulnerabilities
gpac vulnerabilities · Page 20
Vulnerabilities published for gpac in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 397
CVE-2019-20171
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2018-21015
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2018-21016
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2019-13618
In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2019-12483
An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, as demonstrated by MP4Box.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2019-12482
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, as demonstrated by MP4Box.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2019-12481
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
- Update to 1.0.1+dfsg1-2
Published UpdatedCVE-2019-11222
gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-5
Published UpdatedCVE-2019-11221
GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-5
Published UpdatedCVE-2018-20763
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because of missing szLineConv bounds checking.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-20762
GPAC version 0.7.1 and earlier has a buffer overflow vulnerability in the cat_multiple_files function in applications/mp4box/fileimport.c when MP4Box is used for a local directory containing crafted filenames.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-20761
GPAC version 0.7.1 and earlier has a Buffer Overflow vulnerability in the gf_sm_load_init function in scene_manager.c in libgpac_static.a.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-20760
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-13006
An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-13005
An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia/box_code_base.c has a heap-based buffer over-read.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published UpdatedCVE-2018-7752
GPAC through 0.7.1 has a Buffer Overflow in the gf_media_avc_read_sps function in media_tools/av_parsers.c, a different vulnerability than CVE-2018-1000100.
- Update to 0.5.2-426-gc5ad4e4+dfsg5-4.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.