Kery Qi

**Name of the Vulnerable Software and Affected Versions** uclouvain openjpeg versions prior to 2.5.5 **Description** An integer overflow occurs in the `opj pi initialise encode()` function within the `src/lib/openjp2/pi.c` library. This issue requires local access to be exploited. **Recommendations** Install the patch identified as 839936aa33eb8899bbbd80fda02796bb65068951 for versions prior to 2.5.5.

**Name of the Vulnerable Software and Affected Versions** GPAC versions up to 2.4.0 **Description** A flaw exists in GPAC where manipulation of the `Name` argument within the `gf media export webvtt metadata` function, located in the `src/media tools/media export.c` file, can lead to a null pointer dereference. This issue requires local access to exploit. The exploit is publicly available. **Recommendations** Deploy the patch with identifier af951b892dfbaaa38336ba2eba6d6a42c25810fd.

**Name of the Vulnerable Software and Affected Versions** GPAC versions up to 2.4.0 **Description** A security flaw exists in GPAC due to a null pointer dereference in the `DumpMovieInfo` function located in the `applications/mp4box/filedump.c` file. This manipulation can be initiated locally. The exploit for this issue has been publicly released and may be used in attacks. **Recommendations** Implement the patch d45c264c20addf0c1cc05124ede33f8ffa800e68 to correct this issue.

**Name of the Vulnerable Software and Affected Versions** GPAC versions prior to 2.4.0 **Description** A flaw exists in GPAC due to a null pointer dereference in the `dump isom rtp` function within the `applications/mp4box/filedump.c` file. This issue can be triggered locally. The exploit for this issue is publicly available. **Recommendations** Apply the patch f96bd57c3ccdcde4335a0be28cd3e8fe296993de.

**Name of the Vulnerable Software and Affected Versions** GPAC versions up to 2.4.0 **Description** A security issue exists in GPAC related to the SRT Subtitle Import function. The `gf text import srt bifs` function within the `src/scene manager/text to bifs.c` file is susceptible to an out-of-bounds write condition. This manipulation requires local access. The exploit has been publicly disclosed. **Recommendations** Apply patch 10c73b82cf0e367383d091db38566a0e4fe71772.