Vulnerabilities > Gpac > High

DATE CVE VULNERABILITY TITLE RISK
2022-11-29 CVE-2022-4202 Unspecified vulnerability in Gpac 2.1Devrev490G68064E101Master
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master.
network
low complexity
gpac
8.8
2022-11-29 CVE-2022-45202 Out-of-bounds Write vulnerability in Gpac
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.
local
low complexity
gpac CWE-787
7.8
2022-10-19 CVE-2022-43040 Out-of-bounds Write vulnerability in Gpac
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c.
local
low complexity
gpac CWE-787
7.8
2022-10-19 CVE-2022-43042 Out-of-bounds Write vulnerability in Gpac
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c.
local
low complexity
gpac CWE-787
7.8
2022-09-12 CVE-2022-3178 Out-of-bounds Read vulnerability in Gpac
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.
local
low complexity
gpac CWE-125
7.8
2022-09-06 CVE-2022-38530 Out-of-bounds Write vulnerability in Gpac
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD.
local
low complexity
gpac CWE-787
7.8
2022-08-17 CVE-2022-36186 NULL Pointer Dereference vulnerability in Gpac 2.1
A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS).
network
low complexity
gpac CWE-476
7.5
2022-07-19 CVE-2022-2453 Unspecified vulnerability in Gpac
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV.
local
low complexity
gpac
7.8
2022-07-19 CVE-2022-2454 Unspecified vulnerability in Gpac
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV.
local
low complexity
gpac
7.8
2022-05-18 CVE-2022-30976 Out-of-bounds Read vulnerability in Gpac 2.0.0
GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.
local
low complexity
gpac CWE-125
7.1