GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0866 | 7.8 | Feb 16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: through 2.2.0 |
| CVE-2023-0819 | 7.8 | Feb 13 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV Affected: before 2.3.0-dev |
| CVE-2023-0817 | 7.8 | Feb 13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV Affected: before 2.3.0-dev |
| CVE-2023-0770 | 7.8 | Feb 9 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2 Affected: before 2.2.0 |
| CVE-2023-0760 | 7.8 | Feb 9 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV Affected: before 2.2.0 |
| CVE-2023-23145 | 7.8 | Jan 20 | GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function Affected: 2.2-rev0-gab012bbfb-master |
| CVE-2023-23143 | 7.8 | Jan 20 | Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c Affected: 2.3-dev-rev1-g4669ba229-master |
| CVE-2023-0358 | 7.8 | Jan 18 | Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: through 2.2.0 |
| CVE-2022-47663 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 Affected: before 2.2.0 |
| CVE-2022-47661 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes Affected: before 2.2.0 |
| CVE-2022-47660 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c Affected: before 2.2.0 |
| CVE-2022-47659 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data Affected: before 2.2.0 |
| CVE-2022-47658 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039 Affected: before 2.2.0 |
| CVE-2022-47657 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662 Affected: before 2.2.0 |
| CVE-2022-47656 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273 Affected: before 2.2.0 |
| CVE-2022-47654 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261 Affected: before 2.2.0 |
| CVE-2022-47653 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113 Affected: before 2.2.0 |
| CVE-2022-47095 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-47094 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid Affected: before 2.2.0 |
| CVE-2022-47093 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid Affected: before 2.2.0 |
| CVE-2022-47091 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c Affected: before 2.2.0 |
| CVE-2022-47089 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-47088 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow Affected: before 2.2.0 |
| CVE-2022-47087 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-45283 | 7.8 | Dec 6 | GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c Affected: 2.0.0 |
| CVE-2022-45343 | 7.8 | Nov 29 | GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c Affected: before 2.2.0 |
| CVE-2022-45202 | 7.8 | Nov 29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c Affected: before 2.2.0 |
| CVE-2022-43040 | 7.8 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c Affected: before 2.2.0 |
| CVE-2022-43042 | 7.8 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c Affected: before 2.2.0 |
| CVE-2022-3178 | 7.8 | Sep 12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: before 2.1.0-dev |
| CVE-2022-38530 | 7.8 | Sep 6 | GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD Affected: before 2.2.0 |
| CVE-2022-2454 | 7.8 | Jul 19 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV Affected: through 2.0.0 |
| CVE-2022-2453 | 7.8 | Jul 19 | Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV Affected: through 2.0.0 |
| CVE-2022-1441 | 7.8 | Apr 25 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion Affected: 2.0.0 |
| CVE-2022-24578 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c Affected: 1.0.1 |
| CVE-2022-24577 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen Affected: 1.0.1 |
| CVE-2022-24575 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box Affected: 1.0.1 |
| CVE-2022-26967 | 7.8 | Mar 12 | GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode Affected: 2.0 |
| CVE-2021-40574 | 7.8 | Jan 13 | The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a… Affected: 0.9.0 through 1.0.1 |
| CVE-2021-40571 | 7.8 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code… Affected: 1.0.1 |
| CVE-2021-40570 | 7.8 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code… Affected: 1.0.1 |
| CVE-2021-40568 | 7.8 | Jan 13 | A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which allows attackers to cause a denial of… Affected: through 1.0.1 |
| CVE-2021-36417 | 7.8 | Jan 12 | A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via… Affected: 1.0.1 |
| CVE-2021-36414 | 7.8 | Jan 10 | A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted… Affected: 1.0.1 |
| CVE-2021-36412 | 7.8 | Jan 10 | A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified… Affected: 1.0.1 |
| CVE-2021-32271 | 7.8 | Sep 20 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |
| CVE-2021-32268 | 7.8 | Sep 20 | Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code Affected: before 1.0.1 |
| CVE-2021-33362 | 7.8 | Sep 13 | Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file Affected: 1.0.1 |
| CVE-2021-32136 | 7.8 | Sep 13 | Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file Affected: 1.0.1 |
| CVE-2021-32439 | 7.8 | Aug 11 | Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file Affected: 1.0.1 |
