Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content read from `bs` is controllable by user, so is the length, which causes a buffer overflow.
CVSS Information
N/A
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Vulnerability Title
GPAC 缓冲区错误漏洞
Vulnerability Description
GPAC是一款开源的多媒体框架。 GPAC存在缓冲区错误漏洞，该漏洞源于当 MP4Box 试图解析一个 MP4 文件时，它会调用函数 `diST_box_read()` 从视频中读取。在这个函数中，它分配一个固定长度的缓冲区`str`。但是，从 `bs` 读取的内容是由用户控制的，长度也是如此，这会导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A