GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40562 | 5.5 | Jan 12 | A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a… Affected: through 1.0.1 |
| CVE-2021-40563 | 5.5 | Jan 12 | A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box,… Affected: through 1.0.1 |
| CVE-2021-40559 | 5.5 | Jan 12 | A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service Affected: through 1.0.1 |
| CVE-2021-40566 | 5.5 | Jan 12 | A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which… Affected: through 1.0.1 |
| CVE-2021-40564 | 5.5 | Jan 12 | A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes… Affected: through 1.0.2 |
| CVE-2020-25427 | 5.5 | Jan 10 | A Null pointer dereference vulnerability exits in MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master via the gf_isom_get_track_id function, which causes a denial of service Affected: 0.8.0 |
| CVE-2021-46047 | 5.5 | Jan 7 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function Affected: 1.0.1 |
| CVE-2021-46045 | 5.5 | Jan 7 | GPAC 1.0.1 is affected by: Abort failed Affected: 1.0.1 |
| CVE-2021-46046 | 5.5 | Jan 7 | A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-46049 | 5.5 | Jan 7 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-46051 | 5.5 | Jan 7 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-46039 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-46044 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-46043 | 5.5 | Jan 6 | A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46042 | 5.5 | Jan 6 | A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46041 | 5.5 | Jan 6 | A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46040 | 5.5 | Jan 6 | A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent) Affected: 1.0.1 |
| CVE-2021-45831 | 5.5 | Jan 5 | A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service Affected: 1.0.1 |
| CVE-2021-46038 | 5.5 | Jan 5 | A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent) Affected: 1.0.1 |
| CVE-2021-45260 | 5.5 | Dec 22 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45259 | 5.5 | Dec 22 | An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45258 | 5.5 | Dec 22 | A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45263 | 5.5 | Dec 22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45262 | 5.5 | Dec 22 | An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45267 | 5.5 | Dec 22 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44927 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44926 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44925 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44924 | 5.5 | Dec 21 | An infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial of Service Affected: 1.1.0 |
| CVE-2021-44923 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash Affected: 0.9.0 through 1.1.0 |
| CVE-2021-44922 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44921 | 5.5 | Dec 21 | A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44920 | 5.5 | Dec 21 | An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44919 | 5.5 | Dec 21 | A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-44918 | 5.5 | Dec 21 | A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash Affected: 1.1.0 |
| CVE-2021-45289 | 5.5 | Dec 21 | A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service Affected: 1.0.1 |
| CVE-2021-45288 | 5.5 | Dec 21 | A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-45291 | 5.5 | Dec 21 | The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-45297 | 5.5 | Dec 21 | An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size Affected: 1.1.0 |
| CVE-2021-45292 | 5.5 | Dec 21 | The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2020-22679 | 5.5 | Oct 12 | Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input Affected: 0.8.0 |
| CVE-2020-22678 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22677 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22675 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22674 | 5.5 | Oct 12 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-22673 | 5.5 | Oct 12 | Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input Affected: 0.8.0 |
| CVE-2020-23269 | 5.5 | Sep 22 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2020-23266 | 5.5 | Sep 22 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2021-32270 | 5.5 | Sep 20 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |
| CVE-2021-32269 | 5.5 | Sep 20 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |