GPAC 2.3 Dev

CPE Details

GPAC 2.3 Dev
gpac
gpac
2.3
2024-05-09
11h44 +00:00
2024-05-09
11h44 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*

Informations

Vendor

gpac

Product

gpac

Version

2.3

Update

dev

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-22749 2024-01-24 23h00 +00:00 GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577
7.8
High
CVE-2023-50120 2024-01-09 23h00 +00:00 MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
5.5
Medium
CVE-2024-0322 2024-01-08 12h38 +00:00 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
9.1
Critical
CVE-2024-0321 2024-01-08 12h10 +00:00 Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
9.8
Critical
CVE-2023-46871 2023-12-06 23h00 +00:00 GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.
5.3
Medium
CVE-2023-5998 2023-11-07 18h45 +00:00 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
7.5
High
CVE-2023-5595 2023-10-16 08h25 +00:00 Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.
5.5
Medium
CVE-2023-5586 2023-10-15 00h28 +00:00 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
7.8
High
CVE-2023-4778 2023-09-05 15h43 +00:00 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
5.5
Medium
CVE-2023-4722 2023-09-01 15h27 +00:00 Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.
5.5
Medium
CVE-2023-4721 2023-09-01 15h27 +00:00 Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
5.5
Medium
CVE-2023-4720 2023-09-01 15h27 +00:00 Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.
5.5
Medium
CVE-2023-4683 2023-08-31 15h54 +00:00 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
5.5
Medium
CVE-2023-1655 2023-03-27 00h00 +00:00 Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
7.8
High
CVE-2023-1452 2023-03-17 06h50 +00:00 A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability.
7.8
High
CVE-2023-1449 2023-03-17 06h44 +00:00 A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability.
7.8
High
CVE-2023-1448 2023-03-17 06h43 +00:00 A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability.
7.8
High
CVE-2023-0817 2023-02-13 00h00 +00:00 Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.
7.8
High
CVE-2023-0818 2023-02-13 00h00 +00:00 Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.
5.5
Medium
CVE-2023-0819 2023-02-13 00h00 +00:00 Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.
7.8
High
CVE-2022-29340 2022-05-05 10h46 +00:00 GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.
7.5
High
CVE-2022-29339 2022-05-05 10h44 +00:00 In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.
7.5
High