Niugx

**Name of the Vulnerable Software and Affected Versions** aubio versions 0.4.0 through 0.4.8 **Description** The issue is related to a buffer overflow in the `new aubio tempo` function. This buffer overflow can potentially be exploited. **Recommendations** For versions 0.4.0 through 0.4.8, consider disabling the `new aubio tempo` function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** aubio versions 0.4.0 through 0.4.8 **Description** The issue is related to a NULL pointer dereference in the `new aubio filterbank` function, which occurs when an invalid number of filters (`n filters`) is provided. **Recommendations** For versions 0.4.0 through 0.4.8, as a temporary workaround, consider restricting the use of the `new aubio filterbank` function with invalid `n filters` values until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC versions 0.7.1 and earlier **Description** The issue is related to the `gf text get utf8 line` function in the GPAC multimedia platform, which allows an out-of-bounds write due to missing bounds checking for `szLineConv`. This can potentially impact the confidentiality, integrity, and availability of protected information. **Recommendations** For GPAC versions 0.7.1 and earlier, consider applying bounds checking to the `szLineConv` variable in the `gf text get utf8 line` function to prevent out-of-bounds writes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC versions 0.7.1 and earlier **Description** The issue is related to a buffer overflow in the `cat multiple files` function of the GPAC multimedia platform. This can be exploited to impact the confidentiality, integrity, and availability of protected information. The vulnerability is specifically found in the `applications/mp4box/fileimport.c` file when MP4Box is used with a local directory containing crafted filenames. **Recommendations** For GPAC versions 0.7.1 and earlier, consider disabling the `cat multiple files` function as a temporary workaround until a patch is available. Restrict access to the `fileimport.c` module to minimize the risk of exploitation. Avoid using crafted filenames in the affected MP4Box application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC versions 0.7.1 and earlier **Description** The issue is related to a Buffer Overflow in the `gf sm load init` function in `scene manager.c` in `libgpac static.a`. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For GPAC versions 0.7.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.