Vulnerabilities > Gpac > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-10-19 CVE-2022-43045 Unspecified vulnerability in Gpac
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c.
local
low complexity
gpac
5.5
2022-09-15 CVE-2022-3222 Unspecified vulnerability in Gpac
Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.
local
low complexity
gpac
5.5
2022-08-17 CVE-2022-36191 Out-of-bounds Write vulnerability in Gpac
A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box.
local
low complexity
gpac CWE-787
5.5
2022-07-27 CVE-2022-2549 Unspecified vulnerability in Gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to v2.1.0-DEV.
local
low complexity
gpac
5.5
2022-06-28 CVE-2021-40606 Out-of-bounds Read vulnerability in Gpac
The gf_bs_write_data function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-125
5.5
2022-06-28 CVE-2021-40607 Allocation of Resources Without Limits or Throttling vulnerability in Gpac
The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-770
5.5
2022-06-28 CVE-2021-40608 Use of Uninitialized Resource vulnerability in Gpac
The gf_hinter_track_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-908
5.5
2022-06-28 CVE-2021-40609 Allocation of Resources Without Limits or Throttling vulnerability in Gpac
The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.
local
low complexity
gpac CWE-770
5.5
2022-06-28 CVE-2021-40944 NULL Pointer Dereference vulnerability in Gpac 1.1.0
In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC.
local
low complexity
gpac CWE-476
5.5
2022-06-27 CVE-2021-40942 Out-of-bounds Write vulnerability in Gpac 1.1.0
In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC.
local
low complexity
gpac CWE-787
5.5