GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-12-07
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-11-07
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
5.1
EPSS Score
0.0
Published
2023-10-16
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVSS Score
4.4
EPSS Score
0.0
Published
2023-10-15
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.9
EPSS Score
0.0
Published
2023-09-05
Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
4.0
EPSS Score
0.0
Published
2023-09-01
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.9
EPSS Score
0.0
Published
2023-09-01
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.9
EPSS Score
0.0
Published
2023-09-01
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
CVSS Score
5.3
EPSS Score
0.0
Published
2023-08-31
GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-08-28