hitoshura25/cvefixes huggingface dataset:
CVE-2023-4682 (C, published 2023-08-31T16:15Z)
Description: value: Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-122 \u2014 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/avilib.c
Commit message: fixed #2574


Vulnerable code:
	AVI->video_pos++;

		AVI->track[AVI->aptr].audio_posb += todo;

Fixed code:
	AVI->video_pos++;
		AVI->track[AVI->aptr].audio_posb += todo;
CVE-2023-4683 (C, published 2023-08-31T16:15Z)
Description: value: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-476 \u2014 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Repository: https://github.com/gpac/gpac
Files changed:
src/scene_manager/loader_bt.c
src/utils/xml_parser.c
Commit message: fixed #2563


Vulnerable code:
		if (!strcmp(str, "PROFILE")) gf_bt_force_line(parser);

Fixed code:
		if (!strcmp(str, "")) {
			//empty string, force moving to next char
			if (parser->line_pos<parser->line_size) parser->line_pos++;
		}
		else if (!strcmp(str, "PROFILE")) gf_bt_force_line(parser);
			//entity not found, parse as regular string
				parser->in_entity = GF_FALSE;
CVE-2023-46927 (C, published 2023-11-01T15:15Z)
Description: value: GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/isomedia/isom_write.c
Commit message: gf_isom_use_compact_size() check sampleCount!=0 (fixes #2657)


Vulnerable code:
	
	
	if (stsz->sampleSize) {
	
	
		


Fixed code:


	if (stsz->sampleSize && stsz->sampleCount) {
CVE-2023-46928 (C, published 2023-11-01T15:15Z)
Description: value: GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/isom_tools.c
Commit message: null guard on gf_media_change_pl (fixes #2661)


Vulnerable code:

Fixed code:


	if (!avcc)
		return GF_NON_COMPLIANT_BITSTREAM;
CVE-2023-46929 (C, published 2024-01-03T19:15Z)
Description: value: An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows attackers to crash the application.
Severity: nan (CVSS v3 base score: 7.5)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/av_parsers.c
Commit message: add nullguard on gf_avc_change_vui (fixes #2662)


Vulnerable code:

Fixed code:
	if (!avcc)
		return GF_NON_COMPLIANT_BITSTREAM;
CVE-2023-46930 (C, published 2023-11-01T14:15Z)
Description: value: GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/gpac/gpac
Files changed:
src/isomedia/media_odf.c
Commit message: add null guards on gf_isom_find_od_id_for_track() (fixes #2666)


Vulnerable code:

Fixed code:
		if (!od_tk || !od_tk->Media || !od_tk->Media->handler  || !od_tk->Media->information ||
			!od_tk->Media->information->sampleTable || !od_tk->Media->information->sampleTable->SampleSize ) {

			continue;
		}
CVE-2023-46931 (C, published 2023-11-01T14:15Z)
Description: value: GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/ff_dmx.c
Commit message: ffdmx: fix loop index mismatch on side data parsing (fixes #2664)


Vulnerable code:
			ffdmx_parse_side_data(&stream->side_data[i], pid);

Fixed code:
			ffdmx_parse_side_data(&stream->side_data[j], pid);
CVE-2023-4720 (C, published 2023-09-01T16:15Z)
Description: value: Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-1077 \u2014 Floating Point Comparison with Incorrect Operator
The code performs a comparison such as an
        equality test between two float (floating point) values, but
        it uses comparison operators that do not account for the
        possibility of loss of precision.
Repository: https://github.com/gpac/gpac
Files changed:
src/scene_manager/swf_parse.c
Commit message: Fixed #2581


Vulnerable code:
	u32 val, res;
	val = swf_read_int(read, 32);
	res = (val&0xFF);
	res <<=8;
	res |= ((val>>8)&0xFF);
	res<<=8;
	res |= ((val>>16)&0xFF);
	res<<=8;
	res|= ((val>>24)&0xFF);
	return res;
	u16 val, res;
	val = swf_read_int(read, 16);
	res = (val&0xFF);
	res <<=8;
	res |= ((val>>8)&0xFF);
	return res;
	s16 val;
	u8 v1;
	v1 = swf_read_int(read, 8);
	val = swf_read_sint(read, 8);
	val = (val<<8)&0xFF00;
	val |= (v1&0xFF);
	return val;

Fixed code:
	return gf_bs_read_u32_le(read->bs);
	return gf_bs_read_u16_le(read->bs);
	return (s16) gf_bs_read_u16_le(read->bs);
CVE-2023-4721 (C, published 2023-09-01T16:15Z)
Description: value: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/mpeg2_ps.c
Commit message: Fixed #2580


Vulnerable code:

Fixed code:
	if (buflen<6) return found;
CVE-2023-4722 (C, published 2023-09-01T16:15Z)
Description: value: Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-190 \u2014 Integer Overflow or Wraparound
The product performs a calculation that can
         produce an integer overflow or wraparound when the logic
         assumes that the resulting value will always be larger than
         the original value. This occurs when an integer value is
         incremented to a value that is too large to store in the
         associated representation. When this occurs, the value may
         become a very small or negative number.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/mux_isom.c
Commit message: Fixed #2579


Vulnerable code:
			if (max_dur.num * (s64) tkw->pid_dur.den < (s64) max_dur.den * tkw->pid_dur.num) {

Fixed code:
			if (gf_timestamp_less(max_dur.num, max_dur.den, tkw->pid_dur.num, tkw->pid_dur.den)) {
CVE-2023-4754 (C, published 2023-09-04T09:15Z)
Description: value: Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/scene_manager/swf_parse.c
Commit message: Fixed #2582


Vulnerable code:
		offset_table[0] = 0;

Fixed code:
		if (ft->nbGlyphs) offset_table[0] = 0;
CVE-2023-4755 (C, published 2023-09-04T14:15Z)
Description: value: Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-416 \u2014 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/mux_isom.c
Commit message: Fixed #2583


Vulnerable code:

Fixed code:
			if (ctx->ref_tkw == tkw) ctx->ref_tkw = gf_list_get(ctx->tracks, 0);
CVE-2023-4756 (C, published 2023-09-04T09:15Z)
Description: value: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/scene_manager/loader_bt.c
Commit message: Fixed #2584


Vulnerable code:
	while (1) {
	if (parser->line_buffer[parser->line_pos]=='#') {
		parser->line_size = parser->line_pos;
	else if ((parser->line_buffer[parser->line_pos]=='/') && (parser->line_buffer[parser->line_pos+1]=='/') ) parser->line_size = parser->line_pos;
		if (!gf_gzeof(parser->gz_in)) gf_bt_check_line(parser);
		else parser->done = 1;
	else if (!parser->done && (parser->line_size == parser->line_pos)) gf_bt_check_line(parser);

Fixed code:
reload_line:
	while (parser->line_pos < parser->line_size) {
		case '\0':
			parser->line_pos = parser->line_size;
	if (parser->line_pos < parser->line_size) {
		if (parser->line_buffer[parser->line_pos]=='#') {
			parser->line_size = parser->line_pos;
		}
		else if ((parser->line_buffer[parser->line_pos]=='/') && (parser->line_buffer[parser->line_pos+1]=='/') ) {
			parser->line_size = parser->line_pos;
		}
		if (!gf_gzeof(parser->gz_in))
			//avoid recursion
			goto reload_line;
		else
			parser->done = 1;
	else if (!parser->done && (parser->line_size == parser->line_pos))
		//avoid recursion
		goto reload_line;
CVE-2023-4758 (C, published 2023-09-04T16:15Z)
Description: value: Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/avilib.c
Commit message: fixed #2573


Vulnerable code:
						AVI->bitmap_info_header = (alBITMAPINFOHEADER *)
						                          gf_malloc(str2ulong((unsigned char *)&bih.bi_size));
							memcpy(AVI->bitmap_info_header, hdrl_data + i,
							       str2ulong((unsigned char *)&bih.bi_size));

Fixed code:
						bih.bi_size = str2ulong((unsigned char *)&bih.bi_size);

						if (i + bih.bi_size > hdrl_len) ERR_EXIT(AVI_ERR_READ)

						AVI->bitmap_info_header = (alBITMAPINFOHEADER *) gf_malloc(bih.bi_size);
							memcpy(AVI->bitmap_info_header, hdrl_data + i, bih.bi_size);
						int avail = hdrl_len-i;
						if (avail<32) ERR_EXIT(AVI_ERR_READ)
						avail -= 32;
						if (avail < AVI->video_superindex->nEntriesInUse*16) ERR_EXIT(AVI_ERR_READ)
						int avail = hdrl_len-i;
						if (avail<32) ERR_EXIT(AVI_ERR_READ)
						avail -= 32;
						if (avail < AVI->track[AVI->aptr].audio_superindex->nEntriesInUse*16) ERR_EXIT(AVI_ERR_READ)
CVE-2023-4778 (C, published 2023-09-05T16:15Z)
Description: value: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/scene_manager/loader_bt.c
Commit message: fixed #2589


Vulnerable code:

			if (parser->line_pos+i==parser->line_size) break;

Fixed code:
		if (parser->line_pos+i>=parser->line_size) break;
CVE-2023-48011 (C, published 2023-11-15T19:15Z)
Description: value: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.
Severity: nan (CVSS v3 base score: 7.8)
Weakness: CWE-416 \u2014 Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
Repository: https://github.com/gpac/gpac
Files changed:
src/isomedia/movie_fragments.c
Commit message: Fixed #2611


Vulnerable code:

Fixed code:
			gf_list_del_item(movie->moof->trun_list, trun);
			gf_list_del_item(movie->moof->trun_list, trun);
CVE-2023-48013 (C, published 2023-11-15T19:15Z)
Description: value: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.
Severity: nan (CVSS v3 base score: 7.8)
Weakness: CWE-415 \u2014 Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/isoffin_read_ch.c
Commit message: Fixed #2612


Vulnerable code:

Fixed code:
					ch->static_sample->alloc_size = 0;
					ch->static_sample->dataLength = 0;

							ch->static_sample->alloc_size = 0;
							ch->static_sample->dataLength = 0;

									if (ch->pck) {
										gf_filter_pck_discard(ch->pck);
										ch->pck = NULL;
									}
					ch->static_sample->alloc_size = 0;
					ch->static_sample->dataLength = 0;
CVE-2023-48014 (C, published 2023-11-15T19:15Z)
Description: value: GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.
Severity: nan (CVSS v3 base score: 7.8)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/media_tools/av_parsers.c
Commit message: Fixed #2613


Vulnerable code:
			for (i = 0; i < num_scalability_types; i++) {
			dimension_id_len[num_scalability_types - 1] = 1 + (5 - dim_bit_offset[num_scalability_types - 1]);
			dim_bit_offset[num_scalability_types] = 6;

Fixed code:
			u32 num_bits=0;
			for (i = 0; i < num_scalability_types-1; i++) {
				num_bits+=dimension_id_len[i];
			if (num_bits>=6) {
				GF_LOG(GF_LOG_ERROR, GF_LOG_CODING, ("[HEVC] Too many its defined for dimension IDs (%d vs 5 max)\n", num_bits));
				return -1;
			}
			dimension_id_len[num_scalability_types - 1] = 6 - num_bits; //1 + (5 - dim_bit_offset[num_scalability_types - 1]);
			dim_bit_offset[num_scalability_types - 1] = 6;
CVE-2023-5520 (C, published 2023-10-11T12:15Z)
Description: value: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
Severity: nan (CVSS v3 base score: 7.1)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/reframe_ac3.c
Commit message: ac3dmx: add remain size check (fixes #2627)


Vulnerable code:
	
		if (!ctx->in_seek) {
			

Fixed code:

		if (!ctx->in_seek && remain >= ctx->hdr.framesize) {
CVE-2023-5586 (C, published 2023-10-15T01:15Z)
Description: value: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
Severity: nan (CVSS v3 base score: 7.8)
Weakness: CWE-476 \u2014 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/reframe_rawpcm.c
Commit message: Fixed #2632


Vulnerable code:

Fixed code:
		if (!ctx->ch) {
			GF_LOG(GF_LOG_ERROR, GF_LOG_MEDIA, ("[PCMReframe] Channel count %d invalid in wave\n", ctx->ch));
			wav_ok = GF_FALSE;
		}
		if (!ctx->sr) {
			GF_LOG(GF_LOG_ERROR, GF_LOG_MEDIA, ("[PCMReframe] Samplerate %d invalid in wave\n", ctx->sr));
			wav_ok = GF_FALSE;
		}
CVE-2023-5595 (C, published 2023-10-16T09:15Z)
Description: value: Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.
Severity: nan (CVSS v3 base score: 5.5)
Weakness: NVD-CWE-noinfo \u2014 Insufficient Information
There is insufficient information about the issue to classify it; details are unkown or unspecified.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/isoffin_load.c
src/filters/mux_isom.c
src/isomedia/media.c
src/isomedia/tx3g.c
Commit message: fixes #2633 - 3 segv + memleak


Vulnerable code:
			names.vals[i] = gf_strdup(txt->text);
	
	
		



		
		
		
		
					if (add_tk) {
	
	
		//this may be quite long until we have a packet in case input pid is video encoding 
		

	
		(*out_desc)->font_count = txt->font_table->entry_count;
		(*out_desc)->fonts = (GF_FontRecord *) gf_malloc(sizeof(GF_FontRecord) * txt->font_table->entry_count);
		for (i=0; i<txt->font_table->entry_count; i++) {
			(*out_desc)->fonts[i].fontID = txt->font_table->fonts[i].fontID;
			if (txt->font_table->fonts[i].fontName)
				(*out_desc)->fonts[i].fontName = gf_strdup(txt->font_table->fonts[i].fontName);
		GF_Box *a;
		if (e) break;

Fixed code:
			names.vals[i] = gf_strdup(txt->text ? txt->text : "");







					if (add_tk && p2->value.string_list.vals[j]) {


		//this may be quite long until we have a packet in case input pid is video encoding

			if (!ptr || !ptr->lsr_config || !ptr->lsr_config->hdr_size)
				return GF_ISOM_INVALID_MEDIA;

		if (txt->font_table && txt->font_table->entry_count) {
			(*out_desc)->font_count = txt->font_table->entry_count;
			(*out_desc)->fonts = (GF_FontRecord *) gf_malloc(sizeof(GF_FontRecord) * txt->font_table->entry_count);
			for (i=0; i<txt->font_table->entry_count; i++) {
				(*out_desc)->fonts[i].fontID = txt->font_table->fonts[i].fontID;
				if (txt->font_table->fonts[i].fontName)
					(*out_desc)->fonts[i].fontName = gf_strdup(txt->font_table->fonts[i].fontName);
			}
		GF_Box *a = NULL;
		if (e) {
			if (a) gf_isom_box_del(a);
			break;
		}
CVE-2023-5998 (C, published 2023-11-07T19:15Z)
Description: value: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
Severity: nan (CVSS v3 base score: 7.5)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/reframe_mpgvid.c
Commit message: reframe_mpgvid: add size check (fixes #2651)


Vulnerable code:

Fixed code:
			if (size > remain) {
				e = GF_NON_COMPLIANT_BITSTREAM;
				GF_LOG(GF_LOG_ERROR, GF_LOG_MEDIA, ("[MPGVid] packet too large to process (size %llu remain %d)\n", size, remain ));
				break;
			}
CVE-2024-0321 (C, published 2024-01-08T13:15Z)
Description: value: Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 9.8)
Weakness: CWE-787 \u2014 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/load_text.c
Commit message: gf_text_get_utf8_line: add dest buffer len check (fixes #2647)


Vulnerable code:

Fixed code:
		if ( j >= lineSize ) {
			GF_LOG(GF_LOG_DEBUG, GF_LOG_PARSER, ("[TXTIn] UT8 converted line too long for buffer (len: %d, buffer: %d)\n", j, lineSize));
			j = lineSize-1 ;
		}
CVE-2024-0322 (C, published 2024-01-08T13:15Z)
Description: value: Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
Severity: nan (CVSS v3 base score: 9.1)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/reframe_ac3.c
Commit message: fix 5692dc7: make test more strict (#2627)


Vulnerable code:
		if (!ctx->in_seek && remain >= ctx->hdr.framesize) {


Fixed code:
		if (!ctx->in_seek && remain >= sync_pos + ctx->hdr.framesize) {
CVE-2024-24267 (C, published 2024-02-05T18:15Z)
Description: value: gpac v2.2.1 was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.
Severity: nan (CVSS v3 base score: 7.5)
Weakness: CWE-401 \u2014 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
Repository: https://github.com/gpac/gpac
Files changed:
src/utils/os_file.c
Commit message: fix #2571


Vulnerable code:
    
    
	if (!res) return NULL;


Fixed code:


	if (!res)  {
		gf_free(gfio_blob);
		return NULL;
	}
CVE-2024-6061 (C, published 2024-06-17T20:15Z)
Description: value: A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to infinite loop. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 20c0f29139a82779b86453ce7f68d0681ec7624c. It is recommended to apply a patch to fix this issue. The identifier VDB-268789 was assigned to this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: CWE-835 \u2014 Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/isoffin_read.c
src/filters/isoffin_read_ch.c
Commit message: fixed #2871


Vulnerable code:
				ch->nb_empty_retry++;
			ch->nb_empty_retry = 0;

Fixed code:
					ch->playing = GF_FALSE;
CVE-2024-6062 (C, published 2024-06-17T20:15Z)
Description: value: A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue is the function swf_svg_add_iso_sample of the file src/filters/load_text.c of the component MP4Box. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 31e499d310a48bd17c8b055a0bfe0fe35887a7cd. It is recommended to apply a patch to fix this issue. VDB-268790 is the identifier assigned to this vulnerability.
Severity: nan (CVSS v3 base score: )
Weakness: CWE-476 \u2014 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Repository: https://github.com/gpac/gpac
Files changed:
src/filters/load_text.c
Commit message: fixed #2872


Vulnerable code:

Fixed code:
	if (!data || !length) return GF_BAD_PARAM;