GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46045 | 5.5 | Jan 10 | GPAC 1.0.1 is affected by: Abort failed Affected: 1.0.1 |
| CVE-2021-46044 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-46043 | 5.5 | Jan 6 | A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46042 | 5.5 | Jan 6 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46041 | 5.5 | Jan 6 | A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46040 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent) Affected: 1.0.1 |
| CVE-2021-46039 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-46038 | 5.5 | Jan 5 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-45831 | 5.5 | Jan 5 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-45267 | 5.5 | Dec 22 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45263 | 5.5 | Dec 22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45262 | 5.5 | Dec 22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45260 | 5.5 | Dec 22 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45259 | 5.5 | Dec 22 | An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45258 | 5.5 | Dec 22 | A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44927 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44926 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44925 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44924 | 5.5 | Dec 21 | An infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial of Service Affected: 1.1.0 |
| CVE-2021-44923 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash Affected: 0.9.0 through 1.1.0 |
| CVE-2021-44922 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44921 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44920 | 5.5 | Dec 21 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44919 | 5.5 | Dec 21 | A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44918 | 5.5 | Dec 21 | A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45297 | 5.5 | Dec 21 | An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size Affected: 1.1.0 |
| CVE-2021-45292 | 5.5 | Dec 21 | The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-45291 | 5.5 | Dec 21 | The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-45289 | 5.5 | Dec 21 | A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-45288 | 5.5 | Dec 21 | A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2020-22679 | 5.5 | Oct 12 | Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input Affected: 0.8.0 |
| CVE-2020-22678 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22677 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22675 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22674 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22673 | 5.5 | Oct 12 | Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input Affected: 0.8.0 |
| CVE-2020-23269 | 5.5 | Sep 22 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-23266 | 5.5 | Sep 22 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2021-32270 | 5.5 | Sep 20 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |
| CVE-2021-32269 | 5.5 | Sep 20 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |
| CVE-2021-33365 | 5.5 | Sep 13 | Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2021-33363 | 5.5 | Sep 13 | Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2021-33361 | 5.5 | Sep 13 | Memory leak in the afra_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2021-32139 | 5.5 | Sep 13 | The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32138 | 5.5 | Sep 13 | The DumpTrackInfo function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-33366 | 5.5 | Sep 13 | Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2021-33364 | 5.5 | Sep 13 | Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2021-32135 | 5.5 | Sep 13 | The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32132 | 5.5 | Sep 13 | The abst_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32137 | 5.5 | Sep 13 | Heap buffer overflow in the URL_GetProtocolType function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file Affected: 1.0.1 |