Total
277 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2022-3957 | 1 Gpac | 1 Gpac | 2022-11-16 | N/A | 6.5 MEDIUM |
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463. | |||||
CVE-2022-43255 | 1 Gpac | 1 Gpac | 2022-11-03 | N/A | 5.5 MEDIUM |
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c. | |||||
CVE-2022-43254 | 1 Gpac | 1 Gpac | 2022-11-03 | N/A | 5.5 MEDIUM |
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c. | |||||
CVE-2020-23928 | 1 Gpac | 1 Gpac | 2022-10-26 | 5.8 MEDIUM | 7.1 HIGH |
An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. | |||||
CVE-2020-23931 | 1 Gpac | 1 Gpac | 2022-10-26 | 5.8 MEDIUM | 7.1 HIGH |
An issue was discovered in gpac before 1.0.1. The abst_box_read function in box_code_adobe.c has a heap-based buffer over-read. | |||||
CVE-2022-43043 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 5.5 MEDIUM |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at /bifs/field_decode.c. | |||||
CVE-2022-43044 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 5.5 MEDIUM |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at /isomedia/meta.c. | |||||
CVE-2022-43042 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 7.8 HIGH |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c. | |||||
CVE-2022-43040 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 7.8 HIGH |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c. | |||||
CVE-2022-43039 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 5.5 MEDIUM |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref at /isomedia/meta.c. | |||||
CVE-2022-43045 | 1 Gpac | 1 Gpac | 2022-10-20 | N/A | 5.5 MEDIUM |
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c. | |||||
CVE-2019-20162 | 2 Debian, Gpac | 2 Debian Linux, Gpac | 2022-10-14 | 4.3 MEDIUM | 5.5 MEDIUM |
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c. | |||||
CVE-2019-20163 | 2 Debian, Gpac | 2 Debian Linux, Gpac | 2022-10-14 | 4.3 MEDIUM | 5.5 MEDIUM |
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c. | |||||
CVE-2019-20161 | 2 Debian, Gpac | 2 Debian Linux, Gpac | 2022-10-14 | 4.3 MEDIUM | 5.5 MEDIUM |
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c. | |||||
CVE-2019-20170 | 2 Debian, Gpac | 2 Debian Linux, Gpac | 2022-10-14 | 4.3 MEDIUM | 5.5 MEDIUM |
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c. | |||||
CVE-2019-20165 | 2 Debian, Gpac | 2 Debian Linux, Gpac | 2022-10-14 | 4.3 MEDIUM | 5.5 MEDIUM |
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c. | |||||
CVE-2022-24577 | 1 Gpac | 1 Gpac | 2022-09-29 | 6.8 MEDIUM | 7.8 HIGH |
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.) | |||||
CVE-2020-19750 | 1 Gpac | 1 Gpac | 2022-09-20 | 5.0 MEDIUM | 7.5 HIGH |
An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read. | |||||
CVE-2020-19751 | 1 Gpac | 1 Gpac | 2022-09-20 | 6.4 MEDIUM | 9.1 CRITICAL |
An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read. | |||||
CVE-2022-3222 | 1 Gpac | 1 Gpac | 2022-09-19 | N/A | 5.5 MEDIUM |
Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV. |