U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 205 matching records.
Displaying matches 121 through 140.
Vuln ID Summary CVSS Severity
CVE-2021-36412

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,

Published: January 10, 2022; 6:15:09 PM -0500 		V4.0:(not available)
 V3.1: 7.8 HIGH
V2.0: 6.8 MEDIUM
CVE-2021-46051

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. .

Published: January 10, 2022; 9:11:19 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46049

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service.

Published: January 10, 2022; 9:11:18 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46047

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function.

Published: January 10, 2022; 9:11:17 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46046

A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent).

Published: January 10, 2022; 9:11:16 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46045

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent).

Published: January 10, 2022; 9:11:16 AM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46044

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent).

Published: January 06, 2022; 4:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46043

A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service.

Published: January 06, 2022; 4:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46042

A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service.

Published: January 06, 2022; 3:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46041

A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service.

Published: January 06, 2022; 3:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46040

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent).

Published: January 06, 2022; 3:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46039

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent).

Published: January 06, 2022; 3:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-46038

A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).

Published: January 05, 2022; 6:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-45831

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.

Published: January 05, 2022; 3:15:07 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-45292

The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.

Published: December 21, 2021; 1:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-45291

The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.

Published: December 21, 2021; 1:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-45289

A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with signal SIGKILL.

Published: December 21, 2021; 1:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-45288

A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.

Published: December 21, 2021; 12:15:08 PM -0500 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-33365

Memory leak in the gf_isom_get_root_od function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

Published: September 13, 2021; 4:15:08 PM -0400 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2021-33363

Memory leak in the infe_box_read function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.

Published: September 13, 2021; 4:15:08 PM -0400 		V4.0:(not available)
 V3.1: 5.5 MEDIUM
V2.0: 4.3 MEDIUM