{"vulnerability": "CVE-2020-2267", "sightings": [{"uuid": "73cd30fe-5718-45ef-af4c-1eb9deea0e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22677", "type": "seen", "source": "https://t.me/cibsecurity/30465", "content": "\u203c CVE-2020-22677 \u203c\n\nAn issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:55.000000Z"}, {"uuid": "3d98dca3-71c5-49a8-8e5a-e08d75568228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22678", "type": "seen", "source": "https://t.me/cibsecurity/30462", "content": "\u203c CVE-2020-22678 \u203c\n\nAn issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:49.000000Z"}, {"uuid": "6171e569-9e7e-45ab-b269-751ae568ba8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22673", "type": "seen", "source": "https://t.me/cibsecurity/30464", "content": "\u203c CVE-2020-22673 \u203c\n\nMemory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:50.000000Z"}, {"uuid": "f075eab2-2cec-4c70-9858-8756e4e93625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22674", "type": "seen", "source": "https://t.me/cibsecurity/30463", "content": "\u203c CVE-2020-22674 \u203c\n\nAn issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:49.000000Z"}, {"uuid": "5bd2e680-475a-45e3-9f1c-57ef76beca28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22675", "type": "seen", "source": "https://t.me/cibsecurity/30466", "content": "\u203c CVE-2020-22675 \u203c\n\nAn issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:55.000000Z"}, {"uuid": "11318cc2-181f-4a27-bfc7-c14c64dec1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-22679", "type": "seen", "source": "https://t.me/cibsecurity/30460", "content": "\u203c CVE-2020-22679 \u203c\n\nMemory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-13T00:25:47.000000Z"}]}