CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2019-13618
https://notcve.org/view.php?id=CVE-2019-13618
In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c. En GPAC anterior a versión 0.8.0, el archivo isomedia/isom_read.c en la biblioteca libgpac.a presenta una lectura excesiva del búfer en la región heap de la memoria, como es demostrado por un bloqueo en gf_m2ts_sync en el archivo media_tools / mpegts.c. • https://github.com/gpac/gpac/compare/440d475...6b4ab40 https://github.com/gpac/gpac/issues/1250 https://lists.debian.org/debian-lts-announce/2020/01/msg00017.html • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2019-12483
https://notcve.org/view.php?id=CVE-2019-12483
An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, as demonstrated by MP4Box. Se descubrio un defecto en GPAC 0.7.1. Hay un desbordamiento en la memoria dinámica (heap) en la función ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, como lo demuestra MP4Box. • https://github.com/gpac/gpac/issues/1249 https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html • CWE-787: Out-of-bounds Write •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2019-12482
https://notcve.org/view.php?id=CVE-2019-12482
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, as demonstrated by MP4Box. Se descubrio un problema en GPAC 0.7.1. Hay una diferencia de el puntero NULL en la función gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, como desmuestra MP4Box • https://github.com/gpac/gpac/issues/1249 https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2019-12481
https://notcve.org/view.php?id=CVE-2019-12481
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box. Se descubrió un problema en GPAC 0.7.1. Hay una diferencia de el puntero NULL en la función GetESD en isomedia/track.c en libgpac.a, como demuestra MP4Box. • https://github.com/gpac/gpac/issues/1249 https://lists.debian.org/debian-lts-announce/2019/06/msg00030.html • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 2CVE-2019-11222
https://notcve.org/view.php?id=CVE-2019-11222
gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file. gf_bin128_parse in utils/os_divers.c en GPAC 0.7.1 tiene un problema de desbordamiento de búfer para la funcionalidad criptográfica cuando se encuentra con un archivo crafted_drm_file.xml. • https://github.com/gpac/gpac/commit/f3698bb1bce62402805c3fda96551a23101a32f9 https://github.com/gpac/gpac/issues/1204 https://github.com/gpac/gpac/issues/1205 https://lists.debian.org/debian-lts-announce/2019/04/msg00025.html • CWE-787: Out-of-bounds Write •