Jshuang

**Name of the Vulnerable Software and Affected Versions** GPAC version 1.0.1 **Description** The issue is related to a buffer overflow in the `stbl AppendSize` function of the MP4Box command in the GPAC multimedia platform. This occurs due to the lack of input validation when copying a buffer. Exploitation of this issue allows a remote attacker to access confidential data, compromise data integrity, and cause a denial of service using a specially crafted file. The attacker can also execute arbitrary code. **Recommendations** For GPAC version 1.0.1, consider disabling the `stbl AppendSize` function as a temporary workaround until a patch is available. Restrict access to the MP4Box command to minimize the risk of exploitation. Avoid using crafted files that could trigger the buffer overflow in the `stbl AppendSize` function until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** GPAC version 1.0.1 **Description** The issue is related to the `gf hinter finalize` function in the MP4Box command, which allows attackers to cause a denial of service due to a NULL pointer dereference. This can be achieved by using a crafted file. The exploitation of this issue enables a remote attacker to disrupt service. **Recommendations** For GPAC version 1.0.1, consider disabling the `gf hinter finalize` function as a temporary workaround until a patch is available. Restrict the use of the MP4Box command with crafted files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** GPAC version 1.0.1 **Description** The issue is related to the `gf media export filters` function in the MP4Box command of the GPAC multimedia platform, which is associated with NULL pointer dereference errors. This allows a remote attacker to cause a denial of service using a specially crafted file. **Recommendations** For GPAC version 1.0.1, consider disabling the `gf media export filters` function as a temporary workaround until a patch is available. Restrict access to the MP4Box command to minimize the risk of exploitation. Avoid using crafted files that could trigger the NULL pointer dereference error.

**Name of the Vulnerable Software and Affected Versions** GPAC version 1.0.1 **Description** The issue is related to the Media RewriteODFrame function in the MP4Box command, which allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file. This can be exploited by a remote attacker to disrupt service using a specially created file. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** For GPAC version 1.0.1, consider disabling the Media RewriteODFrame function as a temporary workaround until a patch is available. Restrict access to the MP4Box command to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ming (aka libming) version 0.4.8 **Description** The issue is related to an out of bounds read in the `OpCode()` function, located in the decompile.c file within libutil.a. **Recommendations** For Ming (aka libming) version 0.4.8, consider avoiding the use of the `OpCode()` function until a patch is available. As a temporary workaround, restricting access to the decompile.c file or the libutil.a library may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Ming (aka libming) version 0.4.8 **Description** The issue is related to an out of bounds write in the `strcpyext()` function, located in the decompile.c file within libutil.a. **Recommendations** For Ming (aka libming) version 0.4.8, consider avoiding the use of the `strcpyext()` function until a patch is available. As a temporary workaround, restrict access to the decompile.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ming (aka libming) version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `getString()` function, located in the decompile.c file within libutil.a. **Recommendations** For Ming (aka libming) version 0.4.8, consider avoiding the use of the `getString()` function until a patch is available. As a temporary workaround, restrict access to the decompile.c file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libmspack version 0.9.1alpha **Description** The issue is caused by a buffer overflow in the `chmd read headers()` function in the libmspack library, which can allow a remote attacker to disclose protected information using a specially crafted chm file. The attack vector involves the victim opening a maliciously created chm file. **Recommendations** For libmspack version 0.9.1alpha, update to a version after commit 2f084136cfe0d05e5bf5703f3e83c6d955234b4d to resolve the issue. As a temporary workaround, consider avoiding the use of the `chmd read headers()` function until a patch is available. Restrict access to specially crafted chm files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** libming version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `pushdup` function of the `decompile.c` file. **Recommendations** For libming version 0.4.8, consider avoiding the use of the `pushdup` function in the `decompile.c` file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** libming version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `newVar3` function of the decompile.c file. **Recommendations** For libming version 0.4.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libming version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `getInt` function of the `decompile.c` file. **Recommendations** For libming version 0.4.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libming version 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `strlenext` function of the decompile.c file. **Recommendations** For libming version 0.4.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to v1.0.1 **Description** The issue is related to an infinite loop vulnerability in the ISOBMFF reader filter, specifically in the `isoffin read.c` file. The `isoffin process()` function can result in a Denial of Service (DoS) due to an infinite loop. To exploit this, the victim must open a specially crafted mp4 file. **Recommendations** For GPAC versions prior to v1.0.1, update to version v1.0.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the `isoffin process()` function until a patch is available. Restrict access to specially crafted mp4 files to minimize the risk of exploitation.