CVE-2023-0818 – Off-by-one Error in gpac/gpac
https://notcve.org/view.php?id=CVE-2023-0818
Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV. • https://github.com/gpac/gpac/commit/377ab25f3e502db2934a9cf4b54739e1c89a02ff https://huntr.dev/bounties/038e7472-f3e9-46c2-9aea-d6dafb62a18a https://www.debian.org/security/2023/dsa-5411 • CWE-193: Off-by-one Error •
CVE-2023-0817 – Buffer Over-read in gpac/gpac
https://notcve.org/view.php?id=CVE-2023-0817
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. • https://github.com/gpac/gpac/commit/be9f8d395bbd196e3812e9cd80708f06bcc206f7 https://huntr.dev/bounties/cb730bc5-d79c-4de6-9e57-10e8c3ce2cf3 • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •
CVE-2022-29340
https://notcve.org/view.php?id=CVE-2022-29340
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad. GPAC versión 2.1-DEV-rev87-g053aae8-master. presenta una vulnerabilidad de Desreferencia de Puntero Null en gf_isom_parse_movie_boxes_internal debido a un manejo inapropiado del valor de retorno de GF_SKIP_BOX, que causa una Denegación de Servicio. Esta vulnerabilidad fue corregida en el commit 37592ad • https://github.com/gpac/gpac/commit/37592ad86c6ca934d34740012213e467acc4a3b0 https://github.com/gpac/gpac/issues/2163 • CWE-476: NULL Pointer Dereference •
CVE-2022-29339
https://notcve.org/view.php?id=CVE-2022-29339
In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2. En GPAC versión 2.1-DEV-rev87-g053aae8-master, la función BS_ReadByte() en el archivo utils/bitstream.c presenta una aserción fallida, que causa una Denegación de Servicio. Esta vulnerabilidad fue corregida en el commit 9ea93a2 • https://github.com/gpac/gpac/commit/9ea93a2ec8f555ceed1ee27294cf94822f14f10f https://github.com/gpac/gpac/issues/2165 • CWE-617: Reachable Assertion •