GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-36191 | 5.5 | Aug 17 | A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box Affected: before 2.2.0 |
| CVE-2022-2549 | 5.5 | Jul 27 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV Affected: through 2.0.0 |
| CVE-2021-40944 | 5.5 | Jun 28 | In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC Affected: 1.1.0 |
| CVE-2021-40609 | 5.5 | Jun 28 | The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command Affected: before 2.0.0 |
| CVE-2021-40608 | 5.5 | Jun 28 | The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command Affected: before 2.0.0 |
| CVE-2021-40607 | 5.5 | Jun 28 | The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command Affected: before 2.0.0 |
| CVE-2021-40606 | 5.5 | Jun 28 | The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command Affected: before 2.0.0 |
| CVE-2021-40942 | 5.5 | Jun 27 | In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC Affected: 1.1.0 |
| CVE-2021-40592 | 5.5 | Jun 8 | GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in… Affected: before 1.0.1 |
| CVE-2022-29537 | 5.5 | Apr 20 | gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box Affected: 2.0.0 |
| CVE-2022-27148 | 5.5 | Apr 8 | GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow Affected: before 2.0.0 |
| CVE-2022-27147 | 5.5 | Apr 8 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag Affected: before 2.0.0 |
| CVE-2022-27146 | 5.5 | Apr 8 | GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gf_isom_apple_enum_tag Affected: before 2.0.0 |
| CVE-2022-27145 | 5.5 | Apr 8 | GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box Affected: before 2.0.0 |
| CVE-2022-1222 | 5.5 | Apr 4 | Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: through 2.0 |
| CVE-2022-1035 | 5.5 | Mar 21 | Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: through 2.0 |
| CVE-2022-24576 | 5.5 | Mar 14 | GPAC 1.0.1 is affected by Use After Free through MP4Box Affected: 1.0.1 |
| CVE-2022-24574 | 5.5 | Mar 14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra () Affected: 1.0.1 |
| CVE-2021-4043 | 5.5 | Feb 4 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0 Affected: before 1.1.0 |
| CVE-2022-24249 | 5.5 | Feb 4 | A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service Affected: before 2.0.0 |
| CVE-2021-46313 | 5.5 | Jan 21 | The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms () Affected: 1.1.0 |
| CVE-2021-46311 | 5.5 | Jan 21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c Affected: 1.1.0 |
| CVE-2021-46240 | 5.5 | Jan 21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c Affected: 1.1.0 |
| CVE-2021-46239 | 5.5 | Jan 21 | The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c Affected: 1.1.0 |
| CVE-2021-46238 | 5.5 | Jan 21 | GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c Affected: 1.1.0 |
| CVE-2021-46237 | 5.5 | Jan 21 | An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c Affected: 1.1.0 |
| CVE-2021-46236 | 5.5 | Jan 21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c Affected: 1.1.0 |
| CVE-2021-46234 | 5.5 | Jan 21 | A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c Affected: 1.1.0 |
| CVE-2021-45767 | 5.5 | Jan 14 | GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id() Affected: 1.1.0 |
| CVE-2021-45764 | 5.5 | Jan 14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra() Affected: 1.1.0 |
| CVE-2021-45763 | 5.5 | Jan 14 | GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed() Affected: 1.1.0 |
| CVE-2021-45762 | 5.5 | Jan 14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset() Affected: 1.1.0 |
| CVE-2021-45760 | 5.5 | Jan 14 | GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last() Affected: 1.1.0 |
| CVE-2021-40576 | 5.5 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to cause a denial of… Affected: 1.0.1 |
| CVE-2021-40575 | 5.5 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of… Affected: 1.0.1 |
| CVE-2021-40573 | 5.5 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service Affected: 1.0.1 |
| CVE-2021-40572 | 5.5 | Jan 13 | The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service Affected: 1.0.1 |
| CVE-2021-40569 | 5.5 | Jan 13 | The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a denial of service Affected: through 1.0.1 |
| CVE-2021-40567 | 5.5 | Jan 13 | Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box, which causes a denial of service Affected: through 1.0.1 |
| CVE-2021-40566 | 5.5 | Jan 12 | A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which… Affected: through 1.0.1 |
| CVE-2021-40565 | 5.5 | Jan 12 | A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when using mp4box, which… Affected: through 1.0.1 |
| CVE-2021-40564 | 5.5 | Jan 12 | A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes… Affected: through 1.0.2 |
| CVE-2021-40563 | 5.5 | Jan 12 | A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box,… Affected: through 1.0.1 |
| CVE-2021-40562 | 5.5 | Jan 12 | A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a… Affected: through 1.0.1 |
| CVE-2021-40559 | 5.5 | Jan 12 | A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service Affected: through 1.0.1 |
| CVE-2020-25427 | 5.5 | Jan 10 | A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service Affected: 0.8.0 |
| CVE-2021-46051 | 5.5 | Jan 10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-46049 | 5.5 | Jan 10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-46047 | 5.5 | Jan 10 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function Affected: 1.0.1 |
| CVE-2021-46046 | 5.5 | Jan 10 | A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent) Affected: 1.0.1 |