U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 205 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2024-0322

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: January 08, 2024; 8:15:09 AM -0500
V3.1: 9.1 CRITICAL
V2.0:(not available)
CVE-2024-0321

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: January 08, 2024; 8:15:09 AM -0500
V3.1: 9.8 CRITICAL
V2.0:(not available)
CVE-2023-47465

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c.

Published: December 09, 2023; 1:15:45 AM -0500
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-46871

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.

Published: December 07, 2023; 1:15:08 PM -0500
V3.1: 5.3 MEDIUM
V2.0:(not available)
CVE-2023-5998

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Published: November 07, 2023; 2:15:12 PM -0500
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2023-5595

Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Published: October 16, 2023; 5:15:12 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-5586

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Published: October 14, 2023; 9:15:09 PM -0400
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2023-42298

An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c.

Published: October 12, 2023; 12:15:13 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-5520

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

Published: October 11, 2023; 8:15:11 AM -0400
V3.1: 7.1 HIGH
V2.0:(not available)
CVE-2023-5377

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.

Published: October 04, 2023; 6:15:10 AM -0400
V3.1: 7.1 HIGH
V2.0:(not available)
CVE-2023-41000

GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.

Published: September 11, 2023; 11:16:02 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4778

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 05, 2023; 12:15:08 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4758

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 04, 2023; 12:15:08 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4755

Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 04, 2023; 10:15:08 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4756

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 04, 2023; 5:15:07 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4754

Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 04, 2023; 5:15:07 AM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4722

Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 01, 2023; 12:15:08 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4721

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 01, 2023; 12:15:08 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4720

Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: September 01, 2023; 12:15:08 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2023-4683

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.

Published: August 31, 2023; 12:15:10 PM -0400
V3.1: 5.5 MEDIUM
V2.0:(not available)