Gpac: >> Gpac >> 2.3-dev-rev566-g50c2ab06f-master Security Vulnerabilities
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.
CVSS Score
7.8
EPSS Score
0.004
Published
2023-11-15
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
4.0
EPSS Score
0.006
Published
2023-11-07
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
5.1
EPSS Score
0.003
Published
2023-10-16
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
4.4
EPSS Score
0.003
Published
2023-10-15
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
CVSS Score
7.8
EPSS Score
0.005
Published
2023-03-27
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVSS Score
7.3
EPSS Score
0.004
Published
2023-02-13
Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVSS Score
7.1
EPSS Score
0.004
Published
2023-02-13
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV.
CVSS Score
7.8
EPSS Score
0.004
Published
2023-02-13
In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.
CVSS Score
7.5
EPSS Score
0.011
Published
2022-05-05
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.
CVSS Score
7.5
EPSS Score
0.011
Published
2022-05-05