Page 18 of 89 results (0.004 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-29339

https://notcve.org/view.php?id=CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2. En GPAC versión 2.1-DEV-rev87-g053aae8-master, la función BS_ReadByte() en el archivo utils/bitstream.c presenta una aserción fallida, que causa una Denegación de Servicio. Esta vulnerabilidad fue corregida en el commit 9ea93a2 • https://github.com/gpac/gpac/commit/9ea93a2ec8f555ceed1ee27294cf94822f14f10f https://github.com/gpac/gpac/issues/2165 • CWE-617: Reachable Assertion •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2022-1441

https://notcve.org/view.php?id=CVE-2022-1441

MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content read from `bs` is controllable by user, so is the length, which causes a buffer overflow. MP4Box es un componente de GPAC-2.0.0, que es un paquete de terceros ampliamente usado en RPM Fusion. • https://github.com/gpac/gpac/commit/3dbe11b37d65c8472faf0654410068e5500b3adb https://github.com/gpac/gpac/issues/2175 https://www.debian.org/security/2023/dsa-5411 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-29537

https://notcve.org/view.php?id=CVE-2022-29537

gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box. La función gp_rtp_builder_do_hevc en el archivo ietf/rtp_pck_mpeg4.c en GPAC 2.0.0, presenta una lectura excesiva del búfer en la región heap de la memoria, como es demostrado en MP4Box • https://github.com/gpac/gpac/issues/2173 https://www.debian.org/security/2023/dsa-5411 • CWE-125: Out-of-bounds Read •

CVSS: 5.6EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-1172 – Null Pointer Dereference Caused Segmentation Fault in gpac/gpac

https://notcve.org/view.php?id=CVE-2022-1172

Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV. Una Desreferencia de Puntero Null causó un fallo de segmentación en el repositorio de GitHub gpac/gpac versiones anteriores a 2.1.0-DEV • https://github.com/gpac/gpac/commit/55a183e6b8602369c04ea3836e05436a79fbc7f8 https://huntr.dev/bounties/a26cb79c-9257-4fbf-98c5-a5a331efa264 • CWE-476: NULL Pointer Dereference •