Vulnerabilities > Gpac

DATE CVE VULNERABILITY TITLE RISK
2021-08-18 CVE-2021-21855 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-119
8.8
2021-08-18 CVE-2021-21856 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Gpac 1.0.1
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac CWE-119
8.8
2021-08-18 CVE-2021-21857 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-119
8.8
2021-08-18 CVE-2021-21858 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-119
8.8
2021-08-16 CVE-2021-21859 Integer Overflow or Wraparound vulnerability in multiple products
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-190
8.8
2021-08-16 CVE-2021-21860 Incorrect Conversion between Numeric Types vulnerability in multiple products
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-681
8.8
2021-08-16 CVE-2021-21861 Incorrect Conversion between Numeric Types vulnerability in multiple products
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1.
network
low complexity
gpac debian CWE-681
8.8
2021-08-11 CVE-2021-32437 NULL Pointer Dereference vulnerability in Gpac 1.0.1
The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-476
5.5
2021-08-11 CVE-2021-32438 NULL Pointer Dereference vulnerability in Gpac 1.0.1
The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-476
5.5
2021-08-11 CVE-2021-32439 Classic Buffer Overflow vulnerability in Gpac 1.0.1
Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
local
low complexity
gpac CWE-120
7.8