[Git][security-tracker-team/security-tracker][master] Add some new gpac CVEs for initial tracking

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0d4ccc4e by Salvatore Bonaccorso at 2021-09-13T22:25:52+02:00
Add some new gpac CVEs for initial tracking

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17503,15 +17503,21 @@ CVE-2021-33368
 CVE-2021-33367
 	RESERVED
 CVE-2021-33366 (Memory leak in the gf_isom_oinf_read_entry function in MP4Box in GPAC  ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/0a85029d694f992f3631e2f249e4999daee15cbf
+	NOTE: https://github.com/gpac/gpac/issues/1785
 CVE-2021-33365
 	RESERVED
 CVE-2021-33364 (Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7
+	NOTE: https://github.com/gpac/gpac/issues/1783
 CVE-2021-33363
 	RESERVED
 CVE-2021-33362 (Stack buffer overflow in the hevc_parse_vps_extension function in MP4B ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/1273cdc706eeedf8346d4b9faa5b33435056061d
+	NOTE: https://github.com/gpac/gpac/issues/1780
 CVE-2021-33361
 	RESERVED
 CVE-2021-33360
@@ -20452,17 +20458,27 @@ CVE-2021-32139
 CVE-2021-32138
 	RESERVED
 CVE-2021-32137 (Heap buffer overflow in the URL_GetProtocolType function in MP4Box in  ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/328def7d3b93847d64ecb6e9e0399684e57c3eca
+	NOTE: https://github.com/gpac/gpac/issues/1766
 CVE-2021-32136 (Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0. ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/eb71812fcc10e9c5348a5d1c61bd25b6fa06eaed
+	NOTE: https://github.com/gpac/gpac/issues/1765
 CVE-2021-32135 (The trak_box_size function in GPAC 1.0.1 allows attackers to cause a d ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/b8f8b202d4fc23eb0ab4ce71ae96536ca6f5d3f8
+	NOTE: https://github.com/gpac/gpac/issues/1757
 CVE-2021-32134 (The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause  ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/328c6d682698fdb9878dbb4f282963d42c538c01
+	NOTE: https://github.com/gpac/gpac/issues/1756
 CVE-2021-32133
 	RESERVED
 CVE-2021-32132 (The abst_box_size function in GPAC 1.0.1 allows attackers to cause a d ...)
-	TODO: check
+	- gpac <unfixed>
+	NOTE: https://github.com/gpac/gpac/commit/e74be5976a6fee059c638050a237893f7e9a3b23
+	NOTE: https://github.com/gpac/gpac/issues/1753
 CVE-2021-32131
 	RESERVED
 CVE-2021-32130



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d4ccc4e4c6d2fa1dbe3b17be5aeb039ab994218

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0d4ccc4e4c6d2fa1dbe3b17be5aeb039ab994218
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210913/ce430a8c/attachment.htm>